)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:49:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:49:59 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0)

18:49:59 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x0, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  705.393137][T13326] __nla_validate_parse: 3 callbacks suppressed
[  705.393202][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:49:59 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

[  705.592970][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:49:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:00 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:00 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  706.012445][ T3559] usb 2-1: new high-speed USB device number 43 using dummy_hcd
18:50:00 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
syz_clone(0x40000000, &(0x7f0000000080)="6dc7851850e155896eaccb39f8f850d610f3b5cf0f5028f5e434855589ab38a22054a3fa1560c2da", 0x28, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="49753f767c09d0221cb30ff3dcbf")
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

[  706.252392][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  706.472657][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  706.501101][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:00 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  706.637937][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  706.647349][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.655849][ T3559] usb 2-1: Product: syz
[  706.660146][ T3559] usb 2-1: Manufacturer: syz
[  706.665095][ T3559] usb 2-1: SerialNumber: syz
[  706.757951][ T3559] usb 2-1: config 0 descriptor??
[  706.805359][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  707.011674][ T3559] usb 2-1: USB disconnect, device number 43
18:50:01 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:50:01 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:01 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10, 0x0}, 0x0)

18:50:01 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:01 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
syz_clone(0x40000000, &(0x7f0000000080)="6dc7851850e155896eaccb39f8f850d610f3b5cf0f5028f5e434855589ab38a22054a3fa1560c2da", 0x28, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="49753f767c09d0221cb30ff3dcbf")
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

[  707.753896][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  707.969087][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:02 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10, 0x0}, 0x0)

18:50:02 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:02 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  708.242518][ T3559] usb 2-1: new high-speed USB device number 44 using dummy_hcd
18:50:02 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10, 0x0}, 0x0)

[  708.492554][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  708.566783][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:02 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  708.709730][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  708.774644][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  708.784070][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.792408][ T3559] usb 2-1: Product: syz
[  708.796693][ T3559] usb 2-1: Manufacturer: syz
[  708.801408][ T3559] usb 2-1: SerialNumber: syz
[  709.000744][ T3559] usb 2-1: config 0 descriptor??
[  709.046312][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  709.259237][ T3568] usb 2-1: USB disconnect, device number 44
18:50:03 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:50:03 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10, 0x0}, 0x0)

18:50:03 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:03 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601"], 0x5c}}, 0x0)

18:50:03 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  709.930404][T13403] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[  709.956959][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:04 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1})

18:50:04 executing program 3:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, 0x0, 0x0)

18:50:04 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:04 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:04 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

[  710.513167][ T3559] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  710.616007][T13423] __nla_validate_parse: 1 callbacks suppressed
[  710.616071][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  710.732707][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  710.752331][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  711.032727][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  711.042430][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.050595][ T3559] usb 2-1: Product: syz
[  711.055230][ T3559] usb 2-1: Manufacturer: syz
[  711.059970][ T3559] usb 2-1: SerialNumber: syz
[  711.095660][ T3559] usb 2-1: config 0 descriptor??
[  711.136304][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  711.346511][ T3559] usb 2-1: USB disconnect, device number 45
18:50:05 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:50:05 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:05 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r0, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffd19)

18:50:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:05 executing program 2:
socketpair(0x25, 0x0, 0x0, &(0x7f0000000640))

18:50:05 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  712.020121][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:06 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}, 0x18}, 0x0)

18:50:06 executing program 3:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000640))

[  712.123896][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:06 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:06 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  712.472114][ T3559] usb 2-1: new high-speed USB device number 46 using dummy_hcd
18:50:06 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f0000000100), 0x1d40, 0x0)

[  712.712315][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  712.777116][T13459] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  712.890574][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  712.955230][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  712.993259][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  713.002683][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.010829][ T3559] usb 2-1: Product: syz
[  713.015285][ T3559] usb 2-1: Manufacturer: syz
[  713.020012][ T3559] usb 2-1: SerialNumber: syz
[  713.109614][ T3559] usb 2-1: config 0 descriptor??
[  713.155178][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  713.375696][T10334] usb 2-1: USB disconnect, device number 46
18:50:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:07 executing program 2:
keyctl$restrict_keyring(0x7, 0x0, 0x0, 0x0)

18:50:07 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:07 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2=0xe000000a}, 0x10)

18:50:07 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  714.043165][T13472] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:08 executing program 3:
pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x2}, &(0x7f0000000240), 0x0)

[  714.138331][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:08 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30)

[  714.242849][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:08 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:08 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:08 executing program 3:
clock_gettime(0x0, &(0x7f0000000200)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000180)={0x7, 0x0, 0x5, 0x4, 0x0, 0x6}, 0x0, &(0x7f0000000240)={0x0, r0+60000000}, 0x0)

18:50:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:09 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30)

18:50:09 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30)

18:50:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:09 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:09 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:09 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30)

18:50:09 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:10 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30)

[  715.901183][T13522] __nla_validate_parse: 6 callbacks suppressed
[  715.901248][T13522] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:10 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x0, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  715.964190][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  716.042966][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  716.517726][T13536] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  716.581538][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  716.650610][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:10 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30)

18:50:10 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:10 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30)

18:50:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:10 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x0, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  717.232447][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  717.325498][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:11 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:11 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0)

18:50:11 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x0, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:11 executing program 2:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getenv(0x4201, r0, 0x0, 0x0)
process_vm_readv(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/52, 0x91}], 0x1, &(0x7f0000001600), 0x0, 0x0)
syz_clone(0x0, &(0x7f0000000000)="1894117e5222ff80704d8c030cfc8b2247", 0x11, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="adb3b08edcb1800bbb50a16439ddaafa861736ce4077151a8957a813d9934a33ed8942477fa87c21536f43a7f2f9010516b2747f61ebd536962e62e430b5c6d5a49ba1f652f3f537ccad75c02fc7893d07d5dcefdaa440038c3498d7e5461b120b51c71094b51f19eeb0fadbfdaf3327859d11b2fd466d58191ebd5b15fb3dea1e51767abb662796c16c51cdacb5b262fbb7a3fbd36bb862a60c36d08dcb2867f3445e280227979f99183762847e68e3f6762b26e00e7e7e111f535757e964fd6f81b3e5cd433416bd3ff5827154cfc44bcd2b1c6eebf8ece193cc16f5d95b930e100516f4ce37c59e14f1f7")
r1 = syz_clone(0x26a293106a8aa004, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getenv(0x4201, r1, 0x0, 0x0)
rt_sigqueueinfo(r1, 0x9, &(0x7f0000000240)={0x13, 0x1ff, 0x3f})

18:50:12 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)

[  717.984030][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:12 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  718.057556][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:12 executing program 1:
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:12 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x0, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:12 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30)

18:50:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:12 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:12 executing program 3:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "e3118a71a57bb6d92ea875536c6890df2da1acfee266b486c5fcc730931532870d04e42e91503b3c51d749bae719cfb36b2dc8c3386bcaf945a598127af25008"}, 0x48, 0xffffffffffffffff)
keyctl$restrict_keyring(0x10, r0, 0x0, 0x0)

18:50:13 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x0, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:13 executing program 2:
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RREAD(r0, &(0x7f00000001c0)={0x1001, 0x75, 0x0, {0xff6, "4694b9c3a16fafd9b13595f5e8a94b14273c49a40d94d990f1eb8fe878df27550fedc1166e70251bfeaa37e224522a107598d5bc7d83529a20876a831cd5d7c7d4c9bb6c441755431c520e4ee5c768297dd50ddb8fa3f335d03b2f259b9640f8099eacca576c655796a95cbb7084b29ce9f5bedff2cb0c5d4b20408d70dca73751cda3e516bae29bb26c49c86e3b60a3015b95e05197c665293e776d870670fcc61c88e4ba625cdfd99deda21a290291a163f5b51518fa1e45f3139d8e8330e6e881ca5b8d6e47e01fe3a8fe03baaffdf26fbc25617386b690d6708c9e8d4d39aadc0fd8f51b507f204ed590fbf38942ec07fba7e55452ca73d9f4b6c4de39c16646092e3206ca6b2a4ff2c5d50ab55c98eba42d72c15550e835fc55b91c4adee98f3e3e1841087f54d7e1208d548243b0f62d9341c70f02dbd749a355a50a5c17bc3c733ea21096394166ac6a352d39c15c5462f3c8268b2eeaea09199fbe12c8d34d1fed90194daf5e6a1da81359ffece4ff6a91cf63b79bb5a441d055c17e32295e10e23fdcb8f8b029af707441cb07c8b78edc2cc1d74b3bfad823218a61356cfd3c86b49aadecb3a047f2be2d02ff3b6100ba3d753fe95ef671ad6f2433bc207de2279a5d67c6f87a5d4876ebacfaf6c517724a2301c6702ea00425660cb50313fdcf64218603f60a4e14c5385871d680261e6da81c09e4b9e9e9fcea831e06245b48b20577506c183d7992bdbd0e2d02726bd1b85ab3727d20f6160c9262620c912846547f8ea29a2f0026aec722fd7a262d1d4cdac78db06cc3e0ab3c50efd67a600044d1ce841182b8981ca433ad7cd221d41edf31aeee43e9e66074cd7b20f6d1a2a2d8c0c3e0d3b364b4e54f12775ab3c7210a393f47e2fccf6869ecaefb6ddab6eb6262d297c894fa66371707e5db9434dafd3f63344585483b1595c334fca6326fdd295989df9f8b4a073643478ce07ae96ae81cd83bdd32b737a0ac06b86c20950be8451967f5600c0d287a006fae34f8a8880686ea39f0ae3d7a9edbdbd154e5d56e0f399cdc65c868684be4649496ca4bc57b63925484c1fe75fabb3b897a4d81b9f686d412eb8d8be713bc397443d14b6a640aa7c0aa78a63ed8898fe0b2b1d83e5c7181daa513fe011f886d05aefce555fe2e38bc4d6058a332d670417e9c6d299c1eac604d2298434b96bbcfb2cbb8aac23ad661f25982ea3cdcafd8ec40482e2473c34d9e43f85f72a892b727f38a0dbd1899f0fe439d748d50909cbb4775e11a5fd4377e12195f1a413c35eab9c639ab76ed6d9f577df4537b247da4cb143ea60f9e7bb381fd72e92527c4cdbd9dc71463a27f5e9e13db8462351df9c798c95239814f3731a31c9f169788d0d831c08d87e9bcb7de3e36868ae2af8bedf159b1b6f65f7bbbb505312cb708932b301069e75cbd67c6fed465876a182f43b7fe66c255518287c13ad6fa7679feba36dfb0673443361e49ac64f6e4d4d1ab9744e5c1531eac57729c03f0fbda04b377496cfc75a640b2c902141d57d2263500db604d43fdf5a6d22f2459f5dde99aa551e28507a84bd1419e68a7df6dd42a1b24c300b4681fb068b0edaf47809146f3bbac446ada5a30a65b6b04d0d80ca6822ca7ed18c09ec5659aefb37eade8960e03928723b4e3bb63093595a23d79bb874b4b2d2f8589438b2b71269df89c84fcc32de9f884db274f7892dff7ca67a57e61a7e816073343ed2553de15fd3e0301d711353651b7a01e52170df14e73323a0358551be423eef5461c621e1789882c548df73b3e9a9050793a2dd3e97870558a9a4887e8076ffd411cf268e4019a2bd3d7a1a08808ba286d408f67960e0aa37bf9175d944f4447c3acd4a418cd7a339ecad0fb43cce9d11078dfc250c0da22868208d9da6fa81a14e678b2ee9c72fb7b3ff3a2c8bff31bccea60e2702a6b539cd8b798f235d7b8545ba11c233f2094802e6ac15fe1c5ef41397c90fa316a854f2c2e1e10ed5932c5e4d9097fd5f1fc815ae0aa6620f76997715ff5fc4a56bfab213ee870d77bffafa0f164550831664a85218e21df0c2ec80820ff8a39e5b22137f13796c8d487c12124971ebef1b33c7941d9154ad0b87b76e47ad144b4e51c37e66db464d10039935442db083a6be57a46c3bb3ba1e349c141e0c3e29ec7d3632b72efc098023a9e61f2a0a616386aed3dc8e6861b4a81a3521061ac9a647e0c59f0d8baacd6c783d817376f3fcb3002e2d414738d7bcd4e8e833005bed4e555c12f76fe82ef023d2fe8557cf1ea8b6edfc540a16d7d809c5191e1315471613e9544244f802ef1c660d9e12a604a04030dface117f831d4b3f76eeced6647a4281896db65461f332355695aea9b4f14ca2d55fc2b65b47e33bab30b4d5cd5cce9ede9f0cf2268ef0663cdf96f0a8a23028e63341181a67567f5e397f24562a4b3a8aadd248bc1b7750a090d12ca05f66a1cb91c76e30f2c5f1fda4c5401d5b29920177dab06ba72ff492636753b777a45b9b5070c7da36ce3692bc979085b613a9cb4dffc7cd54705f3a7c47df61f4bc5cb04d160f11951a952c59452577df530444fb2a73409e5fb94f4e65ae7275b443aaa878d8feeed575268a69aa4323851ec7f80369d4982f6da60db8321261dc91ffca074ffb2930101960c6d27b85d4f6c7cdb09eae9a730436927c5d274802df1d4cde77ee6e802df7e8ebcddc441c61a14a1258422ff1ef58436802752f4a3dc455578865d9d2f486166fd02f37f9267c4408ddca42c0952948a2af500c4f70669d9327be10eed3d7664aea8c8159c91b1c0afa6d750972a39e5914a484950c996b73c189f698084ad2fb567ccd8d85b1b8ebf93414cccf70d295c1c1783bd3f8216f4347dd0624f1dcb927ffd8b68ccb72cc70767a27328b9aedfeda0bd8a2cbab592d8fd6746fe97361fa0198e5f4f379229dd132bab2b4ea4bf961f1202c198fcce2eeb682da8a94034bcaa95b21f70e797811914217512ec5d590be6949da0399e6b295d9103088ab7f06768c4e80c0620a8a9a8b23b1c076fe3d69c29cdc4de8fb2052ec8365e22ce0db34a1f3b7d8f8b53f724798656728b6fdde26f07515d88e2691be751f5e013ce7caf079b4c3d8468ba309bb4a02075a5b9e16bf661eb2865e669451775b9c13108fa29394b51ec1198571c7b401c795ef908e54972d9b8e18b8b57f607274be8ee6061e7a50c0d4b4bb2cee9df87baf47c96f63e4746f4741185077ff25a8621d8f161972051495d13844430487cd62ca30009dc00d8be6d7cdfa866c0abf4328254562509df31649062715ffbba002596739b086bae852909724b756792b68548a8421a4f43f388a1dab143df2e8bac36e04f67268d654afe0c7d4d3e8be4a8ca3673596d9ca673b22f5138c78680d74c2d33d9c96cf749fa42fb77cf6e5eedd906e069806c12999800c3bd2cb909e558f774c9c2fb0f6a314e76d23ce116cda83fdeee9797eac2656fe6483d891149ec35bf044bb13d470bbb3221b10d583df3094de8c17bc6120d16bcae3f3b8c35c136ec0e0732d0c309ab368af9fcfa3d90bf2309faa85debe0aa70ec3c974e9edd824cb74d1d925ae87b0b3050cc9abe641efeca7ed513a8901ad79bfa1d4f96f6dff7db7052cd3a6c00b1ba94e725ae324f91cb9cb07f85ce1409d24c51f64c8bd32dfcdc35f7d0de10f72e7fb111ccfe7eceb6971b41c675c66958aeb3aede18f5d7c431338861590429cf1f71ae79279fbd0683ed84cced613536fc1e69955644532e1ef07593daf91df87ee7269a55ab6c6b6bf34a1a65956e3a2c7ef46dffebc889564e8b0e01b5a97d0d5165b48b0b16f5a15a8c288e62b389ce8a3a12a44ccd7f183603142ff662fec2e58978b2b12dbb0a6c59d6efbdf64e3920e12eca2cd712b7512ddb30c54d1ad10d494f8fe072598d8296c7e773218cfd855cd8200fc68457838ac707c7fc76cc5065bb3dd52d88e4c1864c8b842fab50c67254afc00560a5a73b0a11e5225d55bb5e58811019433d5c646591787bf1d70e461ea7178914955591fb01161a1109983ad4bcedcac308e98133939d0ac6a63aa59e63e4bd160d9b8f535b7d465ba324e587cf8a9d08158a90abf59d34624be59e4179316bbddf324b01ac95c7f5e2f040fbf9bc696d0d405516065c5919a27f0ccd0df0b3d809e12c538ca11ad5dcd3044d16320617cd59d73ce8b309889b88fd9c94da623d7306957a34fbbff205b332f45917962b0bcea9b533813f3a7553ccd5a5e68af72801a65419eb25c5bc881eba25ba86577ed9eab5dc048279c3dae29236f4aa35549cecd8166e555e7e1442f5180efe5e1c4245e036ee002a0fedaa51f0fcd9794a12089207cdb5e0a8a8f4655deda8d6dc6bb94810ce836198d1f11f8f6d1e10860e2f7e00c80375fec14be6ddca2183bcf3417295820246b848270867099507e09b3479ae9edd5b9340e909ad52af3beb21442f7e33193078f2bbdc67c7560d5ae2c4fcacb747d9596183d0810afd086e4eb81915a6781447d93cdccf17b94592f5212326fd7ac8cab43bfb4bdcb75ae35bb79229f609b9898ba12d32ee06474b45cb2031128218fa4a02253c41d0f62b07d382eb6a32bc007f488948bc45b52b815284be5179ae119bee22711241f6ea721c1bf988255234b0f60ea5fe33eca609e7fc6b75719fcb399f7dad5dfa5b8fe0c57b3ac9f823e8a836e741d57e06842f5675e6a9ecd31f89665d032ea7e3d5a3f8f84ffe1bef1189d7ce8235006037fa46fa1d6de9646ed21180fff1c6ab932cd616e1225500fb4ba96bf6944e790747ba494a91f8dea71e0364ed948289c976e7cffdde3a2e22059598d9b2b344d3262b5604a0806efbc74b4cfc711a9369cf48567518a92ee7af803af81a1f926e0049c92f2fc771ac82adf9ba99dab22f2428b4c031c420f370429fdff8e2b4e672af031f7051acee6f0370a7cff62bd1ebe1b0bd7584cdfe989b7b56a80fa03876097018b35015ac516b3245a2194305809768d1077b1c1d1e68fc2324ea5bd806d5a8cd045df22548fe0c40ac0601367d36c0af750e1d28c8d624481f9b6d52256afa76facbfdd71bac800ed80089c53de489f715d45226ec5f0c438e15dfe58bf802d375b3c8772043fd89188c7f4a22b012feafd7ad4f517458759a372b388ff4ec854680c3153e40b16ae4e26abb4d37f1374acc08bc41600461c70ddcabd208ff8da3bee2d7267af38682999fb08c7e3c2498021940fce6daaa0a91a0a1893d592e789e97e023865e05199ddc85bf82ef4b31767fb9d39b14f35f91cb5d639dd7539d8d6761ec89fff28f24ddd63a922d3628a0daaf9a4b7b480dcd411e96d89e68054ede3f72791c8653b06dfef08f2f2690c7a7eed92e3a59fee7bc4826b3ce664bd045d05919b4c8da8fcda79fa8ffaec6cde77dd66630fa56f35146f19d77e3318df8572aee02761915b67535b84654a9a6cc7d1f94e53c449d3c1b27c292eb60b3f5fe150ed01e8574f04201a7f19af8c7f8896d2ee9ebbd053289221f2b98603f92e6decf11b67fe5b70bfdfb3fb67d6a697b4c258286e8fb768a11c31e9b142ddb92129e732309aae37094ca58fd9982d06caee50d2886f2c199f7869b9a0dfc70fb527dd6dc70b624cd77a02e8b738989e3899f7ce2539295244ff8cd7144001d9dcd3878a985d96b3245239bb59dcbbf7d078553a2b5c3f8040190a6cdc697ac91eae737ec6291371066ed5da71124368dcfb"}}, 0x1001)

18:50:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:13 executing program 3:
prctl$PR_SET_PDEATHSIG(0x22, 0x40040)

18:50:13 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:13 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2163, 0x0)

18:50:14 executing program 1:
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:14 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x0, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:14 executing program 2:
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)

18:50:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:14 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$alg(r0, &(0x7f00000096c0)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="91", 0x1}], 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4011}], 0x2, 0x0)

18:50:14 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x12)

18:50:14 executing program 2:
syz_io_uring_setup(0x1c37, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

18:50:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:14 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:14 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  720.910511][T13647] __nla_validate_parse: 12 callbacks suppressed
[  720.910575][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:15 executing program 2:
prctl$PR_SET_PDEATHSIG(0x2f, 0x4)

[  721.013380][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:16 executing program 1:
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='shortname=mixed,shortname=mixed,uni_xlate=1,shortname=lower,uni_xlate=1,uni_xlate=1,shortname=lower,shortname=lower,nonumtail=0'])

18:50:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:16 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:16 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:16 executing program 2:
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa)
mincore(&(0x7f0000ff8000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/84)

[  722.152403][T13664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f00000001c0)="f649a2f0434aaab1dd6130c4bae157", 0xf}, {0x0, 0x0, 0x7fffffff}], 0x0, &(0x7f0000000480))

18:50:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

[  722.230885][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  722.304816][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:16 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:16 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:16 executing program 3:
syz_io_uring_setup(0x6674, &(0x7f0000000000)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[  722.877526][T13687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  722.959082][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  723.006193][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:17 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x0, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:17 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0)

18:50:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='dmask=', @ANYRESDEC])

18:50:17 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:17 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:17 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x4c, 0xa2280)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x5450)

18:50:17 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000880), 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0xc020660b)

[  723.590155][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  723.689666][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  723.742678][T12094] usb 2-1: new high-speed USB device number 47 using dummy_hcd
18:50:17 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:17 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:17 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000880), 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x5385)

18:50:17 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000880), 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x5460)

[  723.932568][T12094] usb 2-1: device descriptor read/64, error 18
[  724.204085][T12094] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  724.402440][T12094] usb 2-1: device descriptor read/64, error 18
[  724.522517][T12094] usb usb2-port1: attempt power cycle
[  724.932035][T12094] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  725.032210][T12094] usb 2-1: Invalid ep0 maxpacket: 0
[  725.182096][T12094] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  725.272273][T12094] usb 2-1: Invalid ep0 maxpacket: 0
[  725.278082][T12094] usb usb2-port1: unable to enumerate USB device
18:50:20 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCNXCL(r0, 0x5409)

18:50:20 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:20 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:20 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x0, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:20 executing program 3:
timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000300))

[  726.530895][T13732] __nla_validate_parse: 1 callbacks suppressed
[  726.530955][T13732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:20 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
process_vm_readv(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/161, 0xa1}, {0x0}], 0x2, &(0x7f0000000640)=[{&(0x7f0000000580)=""/137, 0x89}], 0x1, 0x0)

[  726.684626][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:20 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  726.749380][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:21 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$alg(r0, &(0x7f00000096c0)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="91", 0x1}], 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}], 0x2, 0x0)

[  727.013013][T10334] usb 2-1: new high-speed USB device number 51 using dummy_hcd
18:50:21 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGWINSZ(r0, 0x5421, &(0x7f0000000040))

[  727.233011][T10334] usb 2-1: device descriptor read/64, error 18
[  727.243227][T13752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  727.315891][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  727.374095][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:21 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  727.512225][T10334] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  727.722323][T10334] usb 2-1: device descriptor read/64, error 18
[  727.842423][T10334] usb usb2-port1: attempt power cycle
[  728.282165][T10334] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  728.392372][T10334] usb 2-1: Invalid ep0 maxpacket: 0
[  728.551935][T10334] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  728.652228][T10334] usb 2-1: Invalid ep0 maxpacket: 0
[  728.658203][T10334] usb usb2-port1: unable to enumerate USB device
18:50:23 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x0, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:23 executing program 3:
futimesat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0xea60}})

18:50:23 executing program 2:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x29}, 0x14)

18:50:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:23 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:23 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  729.819342][T13774] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:23 executing program 3:
shmget$private(0x0, 0x2000, 0x7a00, &(0x7f0000ffc000/0x2000)=nil)

18:50:23 executing program 2:
prctl$PR_SET_PDEATHSIG(0x26, 0x0)

[  729.863901][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  729.940575][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:24 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:24 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040))

18:50:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockname(r0, 0x0, &(0x7f0000000080))

[  730.262883][T12094] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  730.452121][T12094] usb 2-1: device descriptor read/64, error 18
[  730.487931][T13794] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  730.742098][T12094] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  730.931947][T12094] usb 2-1: device descriptor read/64, error 18
[  731.052302][T12094] usb usb2-port1: attempt power cycle
[  731.462229][T12094] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  731.552188][T12094] usb 2-1: Invalid ep0 maxpacket: 0
[  731.702091][T12094] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  731.804569][T12094] usb 2-1: Invalid ep0 maxpacket: 0
[  731.810806][T12094] usb usb2-port1: unable to enumerate USB device
18:50:27 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:27 executing program 3:
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x313102, 0x0)

18:50:27 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:27 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)

18:50:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:27 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  733.048289][T13807] __nla_validate_parse: 2 callbacks suppressed
[  733.048353][T13807] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:27 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

[  733.139715][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:27 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000040))

[  733.222985][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:27 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:27 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r1, 0x69c0c65cfe189779}, 0x14}}, 0x0)

[  733.532839][T12094] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  733.680746][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  733.782014][T12094] usb 2-1: Using ep0 maxpacket: 32
[  733.889250][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  733.920291][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  734.072849][T12094] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  734.082357][T12094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.090593][T12094] usb 2-1: Product: syz
[  734.095027][T12094] usb 2-1: Manufacturer: syz
[  734.099758][T12094] usb 2-1: SerialNumber: syz
[  734.131140][T12094] usb 2-1: config 0 descriptor??
[  734.176476][T12094] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  734.381499][T10334] usb 2-1: USB disconnect, device number 59
18:50:28 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:28 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x17c, 0xffffffff, 0xffffffff, 0x17c, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'veth0_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@icmp={{0x24}, {0x0, "a265"}}, @common=@ttl={{0x24}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x26c)

18:50:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000004180)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000004100)=[{&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x20}, {&(0x7f00000002c0)={0xea4, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xe91, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="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"]}]}, 0xea4}], 0x2}, 0x0)

18:50:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:28 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:28 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  734.998166][T13839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  735.034315][T13842] x_tables: duplicate underflow at hook 3
[  735.124410][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:29 executing program 2:
socket$inet(0x2, 0x0, 0xfe000000)

18:50:29 executing program 3:
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, 0x0)

[  735.173833][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:29 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:29 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  735.462139][T12094] usb 2-1: new high-speed USB device number 60 using dummy_hcd
18:50:29 executing program 3:
syz_open_dev$loop(&(0x7f0000001900), 0x0, 0x0)

[  735.680992][T13859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  735.712342][T12094] usb 2-1: Using ep0 maxpacket: 32
[  736.023024][T12094] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  736.032485][T12094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.040618][T12094] usb 2-1: Product: syz
[  736.045156][T12094] usb 2-1: Manufacturer: syz
[  736.049981][T12094] usb 2-1: SerialNumber: syz
[  736.099736][T12094] usb 2-1: config 0 descriptor??
[  736.144934][T12094] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  736.349201][T12094] usb 2-1: USB disconnect, device number 60
18:50:30 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:30 executing program 2:
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xffffffff}, 0x8)

18:50:30 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:30 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:30 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0)

18:50:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:31 executing program 3:
r0 = gettid()
r1 = gettid()
r2 = syz_clone3(&(0x7f0000001540)={0x110100000, &(0x7f00000003c0), &(0x7f0000000400), 0x0, {}, &(0x7f0000000480)=""/96, 0x60, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, r1], 0x5}, 0x58)
syz_clone3(&(0x7f00000002c0)={0x40000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x9}, &(0x7f00000000c0)=""/235, 0xeb, &(0x7f00000001c0)=""/169, &(0x7f0000000280)=[r1, r0, r2, r2], 0x4}, 0x58)
r3 = gettid()
gettid()
pidfd_open(r3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000015c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '{{()-}@,\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4008000)

18:50:31 executing program 2:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2)

18:50:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:31 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:31 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:31 executing program 2:
select(0x40, &(0x7f00000012c0), &(0x7f0000001300)={0x3}, 0x0, 0x0)

[  737.442128][ T3568] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  737.682464][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  738.012836][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  738.022677][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.030841][ T3568] usb 2-1: Product: syz
[  738.035314][ T3568] usb 2-1: Manufacturer: syz
[  738.040071][ T3568] usb 2-1: SerialNumber: syz
[  738.107017][ T3568] usb 2-1: config 0 descriptor??
[  738.155090][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  738.364393][ T3568] usb 2-1: USB disconnect, device number 61
18:50:32 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:50:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:32 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:32 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:32 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0x4020940d, 0x0)

18:50:32 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0x40a85323, &(0x7f0000001400))

[  739.030547][T13904] __nla_validate_parse: 6 callbacks suppressed
[  739.030608][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:33 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f00000001c0))

[  739.160279][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:33 executing program 2:
setrlimit(0xb, &(0x7f0000000100)={0x0, 0x2000000000bc65})

18:50:33 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:33 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  739.542700][ T3559] usb 2-1: new high-speed USB device number 62 using dummy_hcd
18:50:33 executing program 3:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b0001010030010904"], 0x0)

[  739.772390][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  739.782625][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  739.846162][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  740.112223][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  740.121509][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.130473][ T3559] usb 2-1: Product: syz
[  740.134850][ T3559] usb 2-1: Manufacturer: syz
[  740.139567][ T3559] usb 2-1: SerialNumber: syz
[  740.255621][ T3547] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  740.275044][ T3559] usb 2-1: config 0 descriptor??
[  740.325969][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  740.502110][ T3547] usb 4-1: Using ep0 maxpacket: 16
[  740.537075][ T3559] usb 2-1: USB disconnect, device number 62
[  740.622381][ T3547] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  740.792300][ T3547] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  740.801551][ T3547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.809963][ T3547] usb 4-1: Product: syz
[  740.815249][ T3547] usb 4-1: Manufacturer: syz
[  740.819974][ T3547] usb 4-1: SerialNumber: syz
18:50:35 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:50:35 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002200), 0x109000, 0x0)

18:50:35 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:35 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  741.123619][ T3547] usb 4-1: USB disconnect, device number 10
[  741.129814][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  741.161504][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:35 executing program 2:
syz_usb_connect$uac1(0x0, 0x77, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, "e5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2, 0xfccf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

18:50:35 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:35 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  741.642127][T12094] usb 2-1: new high-speed USB device number 63 using dummy_hcd
18:50:35 executing program 3:
syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0xc00)

[  741.766246][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  741.831554][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  741.885229][ T3559] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  741.913037][T12094] usb 2-1: Using ep0 maxpacket: 32
18:50:36 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  742.132103][ T3559] usb 3-1: Using ep0 maxpacket: 32
[  742.234138][T12094] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  742.243891][T12094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.255817][T12094] usb 2-1: Product: syz
[  742.260719][T12094] usb 2-1: Manufacturer: syz
[  742.265533][T12094] usb 2-1: SerialNumber: syz
[  742.272864][ T3559] usb 3-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config
[  742.283359][ T3559] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  742.292508][ T3559] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  742.303213][ T3559] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  742.356749][T13966] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  742.386753][T12094] usb 2-1: config 0 descriptor??
[  742.443008][T12094] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  742.455903][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  742.570263][ T3559] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  742.579988][ T3559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.588489][ T3559] usb 3-1: Product: syz
[  742.592867][ T3559] usb 3-1: Manufacturer: syz
[  742.597590][ T3559] usb 3-1: SerialNumber: syz
[  742.669828][T12094] usb 2-1: USB disconnect, device number 63
[  743.032320][ T3559] usb 3-1: 0:2 : does not exist
[  743.053575][ T3559] usb 3-1: USB disconnect, device number 70
[  743.098198][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
18:50:37 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:50:37 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0)

18:50:37 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:37 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0x0, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:37 executing program 2:
syz_usb_connect$uac1(0x3, 0xab, &(0x7f0000000080)={{0x12, 0x1, 0x5f56e77a6f152b1c, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x9, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x90}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0xa5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x3, 0x2, "f18d6d"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x3, 0x0, "eb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x1, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "90"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xcc, 0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

18:50:37 executing program 3:
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
getpid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x101140)

18:50:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:37 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:37 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0x0, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:37 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'})

[  743.783850][ T3547] usb 2-1: new high-speed USB device number 64 using dummy_hcd
18:50:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  744.022124][ T3547] usb 2-1: Using ep0 maxpacket: 32
[  744.061992][ T3559] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  744.182159][T14001] __nla_validate_parse: 7 callbacks suppressed
[  744.182220][T14001] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  744.207352][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  744.241534][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  744.302707][ T3547] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  744.312266][ T3547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.320421][ T3547] usb 2-1: Product: syz
[  744.325153][ T3547] usb 2-1: Manufacturer: syz
[  744.329911][ T3547] usb 2-1: SerialNumber: syz
[  744.342219][ T3559] usb 3-1: Using ep0 maxpacket: 32
[  744.416341][ T3547] usb 2-1: config 0 descriptor??
[  744.455710][ T3547] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  744.523831][ T3559] usb 3-1: unable to get BOS descriptor or descriptor too short
[  744.632258][ T3559] usb 3-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config
[  744.642961][ T3559] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  744.652182][ T3559] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  744.663333][ T3547] usb 2-1: USB disconnect, device number 64
[  744.942281][ T3559] usb 3-1: string descriptor 0 read error: -22
[  744.948888][ T3559] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  744.958242][ T3559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.015354][ T3559] usb 3-1: 0:2 : does not exist
18:50:39 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:39 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc4)

18:50:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:39 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0x0, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  745.225181][ T3559] usb 3-1: USB disconnect, device number 71
[  745.396214][T14012] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  745.455924][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  745.557664][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:39 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000001740), 0x8, &(0x7f0000001800)={[{@gid}]})

18:50:39 executing program 3:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x21, &(0x7f0000001b40)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)

18:50:39 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:39 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  745.783661][T12094] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  745.964659][T14023] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:40 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc08c5335, &(0x7f0000001400))

[  746.042022][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  746.072186][T12094] usb 2-1: Using ep0 maxpacket: 32
[  746.074363][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)

[  746.382085][T12094] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  746.391311][T12094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.399615][T12094] usb 2-1: Product: syz
[  746.404064][T12094] usb 2-1: Manufacturer: syz
[  746.408800][T12094] usb 2-1: SerialNumber: syz
[  746.473200][T12094] usb 2-1: config 0 descriptor??
[  746.535371][T12094] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  746.779103][ T3547] usb 2-1: USB disconnect, device number 65
18:50:41 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:41 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0)

18:50:41 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:41 executing program 2:
r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x9, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @string={0x4, 0x3, "158b"}}}, 0x0)

18:50:41 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  747.489003][T14046] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:41 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  747.723065][T12094] usb 3-1: new high-speed USB device number 72 using dummy_hcd
18:50:41 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0)

[  747.962183][T12094] usb 3-1: Using ep0 maxpacket: 32
[  747.972622][ T3559] usb 2-1: new high-speed USB device number 66 using dummy_hcd
18:50:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  748.084057][T12094] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  748.093125][T12094] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  748.103483][T12094] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
18:50:42 executing program 3:
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

[  748.242165][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  748.343428][T12094] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  748.352925][T12094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.361099][T12094] usb 3-1: Product: syz
[  748.365748][T12094] usb 3-1: Manufacturer: syz
[  748.370499][T12094] usb 3-1: SerialNumber: syz
[  748.532375][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  748.541614][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.549997][ T3559] usb 2-1: Product: syz
[  748.554448][ T3559] usb 2-1: Manufacturer: syz
[  748.559171][ T3559] usb 2-1: SerialNumber: syz
[  748.602948][ T3559] usb 2-1: config 0 descriptor??
[  748.655243][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  748.802009][ T3547] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  748.896059][ T3568] usb 2-1: USB disconnect, device number 66
[  749.012690][T12094] usb 3-1: 0:2 : does not exist
[  749.031301][T12094] usb 3-1: USB disconnect, device number 72
[  749.042990][ T3547] usb 4-1: Using ep0 maxpacket: 8
[  749.077783][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  749.162480][ T3547] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  749.332703][ T3547] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40
[  749.342166][ T3547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.350312][ T3547] usb 4-1: Product: syz
[  749.354769][ T3547] usb 4-1: Manufacturer: syz
[  749.359514][ T3547] usb 4-1: SerialNumber: syz
[  749.409715][ T3547] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
18:50:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:43 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:43 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:43 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000001380), 0x0, 0x0)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001440)=""/216)

18:50:43 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  749.612666][ T3547] usb 4-1: USB disconnect, device number 11
[  749.659718][T14083] __nla_validate_parse: 8 callbacks suppressed
[  749.659776][T14083] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:43 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc0844123, &(0x7f0000000440))

[  749.726610][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  749.830231][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:43 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:44 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:44 executing program 2:
gettid()
r0 = gettid()
syz_clone3(0x0, 0x0)
syz_clone3(&(0x7f00000002c0)={0x40000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x9}, &(0x7f00000000c0)=""/235, 0xeb, 0x0, &(0x7f0000000280)=[r0, 0x0], 0x2}, 0x58)
pidfd_open(0x0, 0x0)
syz_clone3(&(0x7f0000001540)={0x110100000, &(0x7f00000003c0), 0x0, 0x0, {}, &(0x7f0000000480)=""/96, 0x60, &(0x7f0000000500)=""/4096, 0x0}, 0x58)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0)

18:50:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  750.115002][T12094] usb 2-1: new high-speed USB device number 67 using dummy_hcd
18:50:44 executing program 3:
getitimer(0x2, &(0x7f0000000340))

[  750.362595][T12094] usb 2-1: Using ep0 maxpacket: 32
18:50:44 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  750.435357][T14101] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  750.500339][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000600), 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[{&(0x7f0000000680)='O', 0x1}, {&(0x7f00000007c0)="fe", 0x1, 0x2677}, {&(0x7f0000000a00)="05", 0x1, 0xd056}], 0x0, &(0x7f0000000b80))

[  750.593217][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:44 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  750.732687][T12094] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  750.742420][T12094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.750591][T12094] usb 2-1: Product: syz
[  750.755018][T12094] usb 2-1: Manufacturer: syz
[  750.759749][T12094] usb 2-1: SerialNumber: syz
[  750.867599][T12094] usb 2-1: config 0 descriptor??
[  750.925959][T12094] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  751.250941][ T3568] usb 2-1: USB disconnect, device number 67
18:50:46 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:46 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x207}, 0x14}}, 0x0)

18:50:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:46 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:46 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:46 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x206080, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

18:50:46 executing program 2:
socket$inet(0x2, 0xa, 0xffffffff)

[  752.128556][T14133] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  752.205301][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:46 executing program 3:
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)

[  752.285846][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:46 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:46 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  752.622945][ T3559] usb 2-1: new high-speed USB device number 68 using dummy_hcd
18:50:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0xc4)

[  752.869647][T14150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  752.903362][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  753.242365][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  753.251623][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.260076][ T3559] usb 2-1: Product: syz
[  753.264662][ T3559] usb 2-1: Manufacturer: syz
[  753.269407][ T3559] usb 2-1: SerialNumber: syz
[  753.372186][ T3559] usb 2-1: config 0 descriptor??
[  753.434811][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  753.690118][ T3559] usb 2-1: USB disconnect, device number 68
18:50:48 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x70, 0x0, &(0x7f0000000840)=[@dead_binder_done, @register_looper, @decrefs={0x40046307, 0x3}, @decrefs, @register_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001c00)={@ptr={0x70742a85, 0x1, &(0x7f0000000c00)=""/4096, 0x1000, 0x1, 0x40}, @fda={0x66646185, 0x1, 0x0, 0x2c}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/111, 0x6f, 0x2, 0x34}}, &(0x7f00000005c0)={0x0, 0x28, 0x48}}, 0x40}], 0x53, 0x0, &(0x7f0000000940)="db4ef2cb1afea4625080914b206f891e922bec9dbbd13c094e0fc8242e56b78a9125ce272ff7399d73c53ed7d2bd804b5db0f33161af23b242783a5e477ac1ef316a062d9b56420474e4a032a37455a3b05ca4"})

18:50:48 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:48 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:48 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc0844123, &(0x7f00000001c0)={0x4})

18:50:48 executing program 2:
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)

18:50:48 executing program 3:
open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

18:50:48 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:48 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  754.862370][ T3568] usb 2-1: new high-speed USB device number 69 using dummy_hcd
18:50:48 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000580))

[  755.058681][T14186] __nla_validate_parse: 5 callbacks suppressed
[  755.058747][T14186] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  755.121935][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  755.191440][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  755.206029][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  755.403044][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  755.412497][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.420644][ T3568] usb 2-1: Product: syz
[  755.425578][ T3568] usb 2-1: Manufacturer: syz
[  755.430318][ T3568] usb 2-1: SerialNumber: syz
[  755.533916][ T3568] usb 2-1: config 0 descriptor??
[  755.574573][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  755.804759][ T3559] usb 2-1: USB disconnect, device number 69
18:50:50 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:50 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48)

18:50:50 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:50 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000001c0)={0x0, [[0x95], [0x0, 0xff], [0x9]], '\x00', [{0x0, 0x0, 0x0, 0x1}]})

18:50:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  756.503207][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)

18:50:50 executing program 2:
getgroups(0x7, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff])

[  756.652011][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  756.722467][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:50 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:50 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x1e, 0xffffffffffffffff)

18:50:51 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  756.973612][ T3559] usb 2-1: new high-speed USB device number 70 using dummy_hcd
18:50:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  757.232003][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  757.360067][T14225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  757.482628][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  757.515003][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  757.562661][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  757.572064][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.580215][ T3559] usb 2-1: Product: syz
[  757.584648][ T3559] usb 2-1: Manufacturer: syz
[  757.589384][ T3559] usb 2-1: SerialNumber: syz
[  757.620439][ T3559] usb 2-1: config 0 descriptor??
[  757.675135][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  757.901517][ T3559] usb 2-1: USB disconnect, device number 70
18:50:52 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000002700)={&(0x7f0000000240)=@abs, 0x8, &(0x7f0000002540)=[{&(0x7f0000000280)="8fff37653e6e7d153dff21d9a7495b49dd3318f4a6b58dea32e3a513792ee32786262d723269c7ac8004b4", 0x2b}, {&(0x7f00000002c0)="ed8573e7f090f1ea60c4c1de23aa2d13ea6d00eb219cf52303f83115ac0fc7b34cd582cda8cef229592e1d7d363f544293f27d151699920883644074d11c19c5d69e9784c3c38cc203178da7b45593ad77fe7a9c282f9c12b09f0a05b883d7bbde178e5e195b", 0x66}], 0x2}, 0x0)

18:50:52 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
fcntl$setstatus(r0, 0x4, 0xc4)

18:50:52 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:52 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:52 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  758.594520][T14236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:52 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:50:52 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$unix(r0, &(0x7f0000001080), &(0x7f0000000000)=0x1002)

18:50:52 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:52 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:53 executing program 2:
r0 = socket(0x2, 0x3, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0)

18:50:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  759.092360][ T3547] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  759.332656][ T3547] usb 2-1: Using ep0 maxpacket: 32
[  759.614001][ T3547] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  759.623362][ T3547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.631510][ T3547] usb 2-1: Product: syz
[  759.635964][ T3547] usb 2-1: Manufacturer: syz
[  759.640707][ T3547] usb 2-1: SerialNumber: syz
[  759.689218][ T3547] usb 2-1: config 0 descriptor??
[  759.735397][ T3547] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  759.972048][ T3547] usb 2-1: USB disconnect, device number 71
18:50:54 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:54 executing program 3:
open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)

18:50:54 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:54 executing program 2:
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
write(r1, &(0x7f00000000c0)="de", 0x1)

18:50:54 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  760.687783][T14277] __nla_validate_parse: 5 callbacks suppressed
[  760.687851][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  760.738979][ T1195] ieee802154 phy0 wpan0: encryption failed: -22
[  760.745567][ T1195] ieee802154 phy1 wpan1: encryption failed: -22
18:50:54 executing program 2:
open(&(0x7f0000000280)='./file0\x00', 0x20281, 0x0)

[  760.833710][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:54 executing program 3:
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0)

[  760.892596][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:55 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  761.072083][T10920] usb 2-1: new high-speed USB device number 72 using dummy_hcd
18:50:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:55 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002540)=[{0x0}], 0x1, &(0x7f0000002640)}, 0x0)

[  761.322471][T10920] usb 2-1: Using ep0 maxpacket: 32
[  761.466588][T14299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  761.626747][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  761.639659][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  761.662638][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  761.672063][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.680205][T10920] usb 2-1: Product: syz
[  761.684662][T10920] usb 2-1: Manufacturer: syz
[  761.689497][T10920] usb 2-1: SerialNumber: syz
[  761.742201][T10920] usb 2-1: config 0 descriptor??
[  761.785287][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  762.026022][T10920] usb 2-1: USB disconnect, device number 72
18:50:56 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:56 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000001480)={&(0x7f0000000080)=@abs, 0x8, &(0x7f0000001400)=[{&(0x7f0000000180)="e7084a5c130d1ddd32aa1f9c39947c8cb15aa925a3bffc9457e172ccbbbaee2bc5ad2adefa57acd3709659aa3f33fd81a3fabb5319b44c", 0x37}, {&(0x7f00000001c0)="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", 0x74d}], 0x2}, 0x0)

18:50:56 executing program 2:
open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
acct(&(0x7f0000000000)='./file0\x00')

18:50:56 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:56 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  762.795616][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:56 executing program 3:
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001840)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff})

18:50:57 executing program 2:
r0 = semget(0x2, 0x4, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/4096)

[  762.918555][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  762.965517][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:50:57 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:57 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:57 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$unix(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

18:50:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  763.222029][T10920] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  763.473835][T10920] usb 2-1: Using ep0 maxpacket: 32
[  763.543511][T14338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  763.802821][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  763.812383][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.820528][T10920] usb 2-1: Product: syz
[  763.824957][T10920] usb 2-1: Manufacturer: syz
[  763.829688][T10920] usb 2-1: SerialNumber: syz
[  763.884505][T10920] usb 2-1: config 0 descriptor??
[  763.925288][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  764.152978][T10920] usb 2-1: USB disconnect, device number 73
18:50:58 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:58 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:58 executing program 2:
r0 = semget(0x2, 0x4, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/4096)

18:50:58 executing program 3:
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

18:50:58 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:50:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

18:50:59 executing program 2:
r0 = semget(0x2, 0x4, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/4096)

18:50:59 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:59 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:50:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  765.303775][T10920] usb 2-1: new high-speed USB device number 74 using dummy_hcd
18:50:59 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  765.552390][T10920] usb 2-1: Using ep0 maxpacket: 32
[  765.862752][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  765.872289][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.880434][T10920] usb 2-1: Product: syz
[  765.885057][T10920] usb 2-1: Manufacturer: syz
[  765.889789][T10920] usb 2-1: SerialNumber: syz
[  765.913261][T10920] usb 2-1: config 0 descriptor??
[  765.965376][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  766.352026][ T3547] usb 2-1: USB disconnect, device number 74
18:51:01 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:01 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x6, 0x0, 0xd}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:51:01 executing program 2:
r0 = semget(0x2, 0x4, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/4096)

18:51:01 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:01 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  767.059834][T14387] __nla_validate_parse: 8 callbacks suppressed
[  767.059902][T14387] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:01 executing program 3:
socketpair(0x2c, 0x3, 0x1f, &(0x7f0000000000))

18:51:01 executing program 2:
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x80)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100), 0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

[  767.230575][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  767.260956][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:01 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:01 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  767.522185][ T3547] usb 2-1: new high-speed USB device number 75 using dummy_hcd
18:51:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:01 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind(r0, &(0x7f0000000000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha384-neon\x00'}, 0x80)

[  767.762154][ T3547] usb 2-1: Using ep0 maxpacket: 32
[  767.863729][T14411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  767.955873][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  767.977140][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  768.052212][ T3547] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  768.061450][ T3547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.069817][ T3547] usb 2-1: Product: syz
[  768.075294][ T3547] usb 2-1: Manufacturer: syz
[  768.080038][ T3547] usb 2-1: SerialNumber: syz
[  768.110325][ T3547] usb 2-1: config 0 descriptor??
[  768.164230][ T3547] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  768.593159][T10920] usb 2-1: USB disconnect, device number 75
18:51:03 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:03 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:03 executing program 2:
r0 = epoll_create1(0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xe0000012})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x20000000})

18:51:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:03 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  769.311515][T14427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:03 executing program 2:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x167240, 0x0)

[  769.503040][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:03 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  769.546621][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:03 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  769.782305][T10920] usb 2-1: new high-speed USB device number 76 using dummy_hcd
18:51:03 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0)

18:51:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  770.042043][T10920] usb 2-1: Using ep0 maxpacket: 32
[  770.252989][T14454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  770.365704][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  770.375619][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.383942][T10920] usb 2-1: Product: syz
[  770.388375][T10920] usb 2-1: Manufacturer: syz
[  770.393382][T10920] usb 2-1: SerialNumber: syz
[  770.461904][T10920] usb 2-1: config 0 descriptor??
[  770.505157][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  770.914990][ T3547] usb 2-1: USB disconnect, device number 76
18:51:05 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:05 executing program 2:
bpf$MAP_CREATE(0x200000000000000, &(0x7f00000000c0)=@base={0x17, 0x0, 0x10000, 0x300}, 0x48)

18:51:05 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:05 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:05 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:06 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, 0x0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

[  772.159495][T10920] usb 2-1: new high-speed USB device number 77 using dummy_hcd
18:51:06 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  772.411117][T14488] __nla_validate_parse: 5 callbacks suppressed
[  772.411184][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  772.429413][T10920] usb 2-1: Using ep0 maxpacket: 32
18:51:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, 0x0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

[  772.581158][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  772.627929][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  772.713017][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  772.722516][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.730679][T10920] usb 2-1: Product: syz
[  772.735331][T10920] usb 2-1: Manufacturer: syz
[  772.740061][T10920] usb 2-1: SerialNumber: syz
[  772.820267][T10920] usb 2-1: config 0 descriptor??
18:51:06 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  772.870682][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  773.129256][T10920] usb 2-1: USB disconnect, device number 77
18:51:07 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

18:51:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:07 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  773.453900][T14511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  773.545363][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  773.627845][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:07 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, 0x0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:07 executing program 2:
open(0x0, 0x2c0402, 0x0)

18:51:07 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:07 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:51:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:08 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect(r0, &(0x7f0000000080)=@in={0x10}, 0x10)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4)

18:51:08 executing program 3:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

[  774.159473][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  774.252094][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:08 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  774.303492][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  774.351980][T10920] usb 2-1: new high-speed USB device number 78 using dummy_hcd
18:51:08 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/143, &(0x7f0000000340)=0x8f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, {0x1, 0x3, 0x0, 0x3f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:51:08 executing program 2:
open(0x0, 0x40b, 0x0)

[  774.592105][T10920] usb 2-1: Using ep0 maxpacket: 32
18:51:08 executing program 3:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

[  774.882670][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  774.892270][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.900528][T10920] usb 2-1: Product: syz
[  774.904997][T10920] usb 2-1: Manufacturer: syz
[  774.909732][T10920] usb 2-1: SerialNumber: syz
[  775.084363][T10920] usb 2-1: config 0 descriptor??
[  775.125909][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  775.382596][T10920] usb 2-1: USB disconnect, device number 78
18:51:10 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:10 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:10 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
read(r0, &(0x7f0000000040)=""/56, 0x38)

18:51:10 executing program 3:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:10 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x95, 0x1, 'g'}, 0x9)

18:51:10 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000080), 0x88)

[  776.108679][T14557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:10 executing program 2:
socket(0x1d, 0x0, 0xffffffe0)

18:51:10 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0x0, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0)

[  776.552102][ T3547] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  776.802479][ T3547] usb 2-1: Using ep0 maxpacket: 32
[  777.083135][ T3547] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  777.092714][ T3547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.100874][ T3547] usb 2-1: Product: syz
[  777.105316][ T3547] usb 2-1: Manufacturer: syz
[  777.110053][ T3547] usb 2-1: SerialNumber: syz
[  777.157887][ T3547] usb 2-1: config 0 descriptor??
[  777.205212][ T3547] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  777.426828][T10920] usb 2-1: USB disconnect, device number 79
18:51:12 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:12 executing program 2:
bpf$BPF_GET_PROG_INFO(0x1b, 0x0, 0x0)

18:51:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:12 executing program 0:
bpf$BPF_GET_PROG_INFO(0x1d, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

18:51:12 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0x0, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  778.073360][T14593] __nla_validate_parse: 2 callbacks suppressed
[  778.073425][T14593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:12 executing program 2:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x48000)

18:51:12 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0)

[  778.220655][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:12 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

[  778.303805][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}})

18:51:12 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0x0, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  778.572350][T10920] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  778.822098][T10920] usb 2-1: Using ep0 maxpacket: 32
[  778.986596][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  779.114812][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  779.125725][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  779.135683][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.144004][T10920] usb 2-1: Product: syz
[  779.148323][T10920] usb 2-1: Manufacturer: syz
[  779.153190][T10920] usb 2-1: SerialNumber: syz
[  779.173221][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  779.196393][T10920] usb 2-1: config 0 descriptor??
[  779.248220][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  779.473895][ T3547] usb 2-1: USB disconnect, device number 80
18:51:14 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:14 executing program 2:
bpf$BPF_GET_PROG_INFO(0x13, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

18:51:14 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:14 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:51:14 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:14 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:14 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r0, 0x0, 0x0)

[  780.202864][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:14 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

[  780.365212][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:14 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:14 executing program 0:
io_uring_setup(0x5606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x32})
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x20080, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x20, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, r1]}, 0x80)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x125500, 0x0)

18:51:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, 0x0, 0x0)

[  780.517781][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  780.642991][ T3547] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  780.882125][ T3547] usb 2-1: Using ep0 maxpacket: 32
[  781.263118][ T3547] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  781.272455][ T3547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.280613][ T3547] usb 2-1: Product: syz
[  781.285106][ T3547] usb 2-1: Manufacturer: syz
[  781.289838][ T3547] usb 2-1: SerialNumber: syz
[  781.354058][ T3547] usb 2-1: config 0 descriptor??
[  781.395433][ T3547] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  781.626230][ T3547] usb 2-1: USB disconnect, device number 81
18:51:16 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:16 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:16 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@prinfo={0x14, 0x84, 0x7, {0xfd032f38c1859452}}, @sndrcv={0x2c}], 0x40}, 0x0)

18:51:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, 0x0, 0x0)

18:51:16 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:16 executing program 0:
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}})
r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
r1 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x3000)

18:51:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, 0x0, 0x0)

[  782.349684][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:16 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:16 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  782.842505][T10920] usb 2-1: new high-speed USB device number 82 using dummy_hcd
18:51:17 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0)

18:51:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

[  783.172556][T10920] usb 2-1: Using ep0 maxpacket: 32
[  783.238697][T14684] __nla_validate_parse: 2 callbacks suppressed
[  783.238765][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  783.326558][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  783.384919][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  783.473317][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  783.482781][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.491007][T10920] usb 2-1: Product: syz
[  783.495492][T10920] usb 2-1: Manufacturer: syz
[  783.500304][T10920] usb 2-1: SerialNumber: syz
[  783.563048][T10920] usb 2-1: config 0 descriptor??
[  783.605126][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  783.840479][ T3568] usb 2-1: USB disconnect, device number 82
18:51:18 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:18 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:18 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

18:51:18 executing program 0:
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x40d41)

18:51:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

[  784.558842][T14703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:18 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8922, &(0x7f00000001c0)={'wg0\x00'})

18:51:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

[  784.675306][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:18 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

[  785.102388][ T3568] usb 2-1: new high-speed USB device number 83 using dummy_hcd
18:51:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)

18:51:19 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

[  785.237003][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  785.352204][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  785.451274][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  785.643160][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  785.652619][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.660776][ T3568] usb 2-1: Product: syz
[  785.666336][ T3568] usb 2-1: Manufacturer: syz
[  785.671076][ T3568] usb 2-1: SerialNumber: syz
[  785.798779][ T3568] usb 2-1: config 0 descriptor??
[  785.844768][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  786.077116][ T3568] usb 2-1: USB disconnect, device number 83
18:51:20 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:20 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:20 executing program 0:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000d00))

18:51:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)

18:51:20 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

[  786.757944][T14733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  786.858258][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:21 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)

18:51:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, r1, 0xd19, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)

18:51:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:21 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  787.212346][ T3547] usb 2-1: new high-speed USB device number 84 using dummy_hcd
18:51:21 executing program 2:
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000))

[  787.472165][ T3547] usb 2-1: Using ep0 maxpacket: 32
[  787.554054][T14757] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  787.792290][ T3547] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  787.802344][ T3547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.810590][ T3547] usb 2-1: Product: syz
[  787.815817][ T3547] usb 2-1: Manufacturer: syz
[  787.820665][ T3547] usb 2-1: SerialNumber: syz
[  787.884828][ T3547] usb 2-1: config 0 descriptor??
[  787.926170][ T3547] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  788.164538][ T3547] usb 2-1: USB disconnect, device number 84
18:51:22 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, 0x0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:22 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:22 executing program 2:
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000))

18:51:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:22 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

[  788.852152][T14772] __nla_validate_parse: 1 callbacks suppressed
[  788.852213][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:22 executing program 2:
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000))

18:51:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, 0x0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

[  788.976975][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:23 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  789.254022][ T3568] usb 2-1: new high-speed USB device number 85 using dummy_hcd
18:51:23 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, 0x0, 0x401, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

[  789.512276][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  789.574939][T14790] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  789.718573][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  789.803343][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  789.812706][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.820851][ T3568] usb 2-1: Product: syz
[  789.825301][ T3568] usb 2-1: Manufacturer: syz
[  789.830029][ T3568] usb 2-1: SerialNumber: syz
[  789.930331][ T3568] usb 2-1: config 0 descriptor??
[  789.994163][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  790.251570][ T3559] usb 2-1: USB disconnect, device number 85
18:51:24 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:24 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

18:51:24 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:24 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  791.013569][T14807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:25 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

[  791.137009][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:25 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  791.463355][ T3568] usb 2-1: new high-speed USB device number 86 using dummy_hcd
18:51:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r1, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0)

18:51:25 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

[  791.712318][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  791.739261][T14820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  791.849116][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  791.993726][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  792.003215][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.011453][ T3568] usb 2-1: Product: syz
[  792.017111][ T3568] usb 2-1: Manufacturer: syz
[  792.022192][ T3568] usb 2-1: SerialNumber: syz
[  792.050661][ T3568] usb 2-1: config 0 descriptor??
[  792.107110][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  792.416709][ T3568] usb 2-1: USB disconnect, device number 86
18:51:27 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:27 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r1, 0x401}, 0x14}}, 0x0)

18:51:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:27 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:27 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x5}, 0x8)

[  793.206873][T14838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:27 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

[  793.280340][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r1, 0x401}, 0x14}}, 0x0)

18:51:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:27 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:27 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r1, 0x401}, 0x14}}, 0x0)

[  793.702210][ T3568] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  793.944056][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  793.988582][T14856] __nla_validate_parse: 1 callbacks suppressed
[  793.988649][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  794.232671][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  794.242221][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.250369][ T3568] usb 2-1: Product: syz
[  794.255097][ T3568] usb 2-1: Manufacturer: syz
[  794.259831][ T3568] usb 2-1: SerialNumber: syz
[  794.365221][ T3568] usb 2-1: config 0 descriptor??
[  794.405098][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  794.635994][ T3568] usb 2-1: USB disconnect, device number 87
18:51:29 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:29 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:29 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:29 executing program 3:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18)

18:51:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:29 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000004400)=[{{&(0x7f0000000100)={0xa, 0x0, 0x5, @loopback, 0x400}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="9d", 0x1}], 0x1, &(0x7f00000003c0)=[@rthdrdstopts={{0x18}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@enc_lim]}}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4}]}}}], 0x68}}, {{&(0x7f0000000640)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000680)='=', 0x1}], 0x1, &(0x7f0000000800)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x0)

[  795.337429][T14873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0xa01}, 0x14}}, 0x0)

18:51:29 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:29 executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000100)={0x1c, 0x0, 0x9, 0x9})

[  795.463293][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:29 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:29 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

[  795.832510][ T3568] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  796.063472][T14891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  796.082882][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  796.130284][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  796.372867][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  796.382269][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.390397][ T3568] usb 2-1: Product: syz
[  796.395083][ T3568] usb 2-1: Manufacturer: syz
[  796.399807][ T3568] usb 2-1: SerialNumber: syz
[  796.411341][ T3568] usb 2-1: config 0 descriptor??
[  796.454956][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  796.682791][ T3568] usb 2-1: USB disconnect, device number 88
18:51:31 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0)
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:31 executing program 0:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0)

18:51:31 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev, @empty, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})

18:51:31 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:31 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  797.387748][T14905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:31 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:31 executing program 3:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {}, 0xff}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r3}, 0x18)

[  797.502303][T14911] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  797.562927][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:31 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:31 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  797.823535][T10334] usb 2-1: new high-speed USB device number 89 using dummy_hcd
18:51:32 executing program 3:
r0 = socket(0xa, 0x3, 0x3)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

[  798.083000][T10334] usb 2-1: Using ep0 maxpacket: 32
[  798.130092][T14925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  798.212500][T14925] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  798.373931][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  798.383588][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.391879][T10334] usb 2-1: Product: syz
[  798.396195][T10334] usb 2-1: Manufacturer: syz
[  798.400951][T10334] usb 2-1: SerialNumber: syz
[  798.551222][T10334] usb 2-1: config 0 descriptor??
[  798.615219][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  798.841379][ T3559] usb 2-1: USB disconnect, device number 89
18:51:33 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0)
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:33 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:33 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:33 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:51:33 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10)
sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=[{0x10}], 0x10}, 0x185)

18:51:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  799.575111][T14943] __nla_validate_parse: 1 callbacks suppressed
[  799.575180][T14943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:33 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000))

18:51:33 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)

18:51:33 executing program 0:
open$dir(&(0x7f0000000080)='./file0\x00', 0x8368, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
rename(&(0x7f0000000000)='./file0\x00', 0x0)

[  799.777113][T14943] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  799.865163][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:34 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:34 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000))

18:51:34 executing program 3:
r0 = socket(0x1c, 0x10000001, 0x84)
r1 = dup2(r0, r0)
r2 = dup(r1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x8)

[  800.062508][T10334] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  800.309125][T10334] usb 2-1: Using ep0 maxpacket: 32
[  800.588123][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  800.597604][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.605974][T10334] usb 2-1: Product: syz
[  800.610299][T10334] usb 2-1: Manufacturer: syz
[  800.616065][T10334] usb 2-1: SerialNumber: syz
[  800.640372][T10334] usb 2-1: config 0 descriptor??
[  800.693487][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  800.912921][ T3559] usb 2-1: USB disconnect, device number 90
18:51:35 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0)
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:35 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x10}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x22, &(0x7f0000000100), &(0x7f0000000200)=0xc)

18:51:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:35 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000140)={0x0, 0x2, "307f"}, &(0x7f00000001c0)=0xa)

18:51:35 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000))

18:51:35 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  801.686011][T14977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:35 executing program 3:
openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)

18:51:35 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000))

18:51:35 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:36 executing program 0:
semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/148)

[  801.926964][T14982] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  802.007734][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  802.134583][ T3559] usb 2-1: new high-speed USB device number 91 using dummy_hcd
18:51:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvfrom(r0, &(0x7f0000000000)=""/211, 0xd3, 0x42, &(0x7f0000000100)=@hci, 0x80)

18:51:36 executing program 0:
msgget(0x0, 0x602)

[  802.382781][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  802.702375][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  802.711672][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.720438][ T3559] usb 2-1: Product: syz
[  802.724820][ T3559] usb 2-1: Manufacturer: syz
[  802.729620][ T3559] usb 2-1: SerialNumber: syz
[  802.845239][ T3559] usb 2-1: config 0 descriptor??
[  802.905100][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  803.140253][T10334] usb 2-1: USB disconnect, device number 91
18:51:37 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:37 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001280)={0x0, 0x0})

18:51:37 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0)

18:51:37 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:37 executing program 0:
openat$tcp_congestion(0xffffffffffffff9c, 0xffffffffffffffff, 0x1, 0x0)

18:51:38 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x1400, 0x41f}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/118}, 0x20)

18:51:38 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0xc00, 0x41f}, 0x48)

[  803.833157][T15010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  803.962616][T15010] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:38 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:38 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x4, 0x4, 0x1}, 0x48)

18:51:38 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$sock(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_devices(r2, 0x0, 0x0)

[  803.970746][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  804.232637][ T3568] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  804.472013][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  804.658845][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  804.765979][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  804.766114][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.766215][ T3568] usb 2-1: Product: syz
[  804.766293][ T3568] usb 2-1: Manufacturer: syz
[  804.766373][ T3568] usb 2-1: SerialNumber: syz
[  804.772352][ T3568] usb 2-1: config 0 descriptor??
[  804.808887][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  804.809819][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  804.816141][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  805.489972][ T3568] usb 2-1: USB disconnect, device number 92
18:51:40 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:40 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[{0x10, 0x1, 0x2}], 0x10}, 0x0)

18:51:40 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x3f, 0x7f, 0x3ff}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20)

18:51:40 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:51:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:40 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0)

18:51:40 executing program 0:
open$dir(&(0x7f0000000980)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000a80)='./file0\x00', 0x0, 0x0)

18:51:40 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)

[  806.212002][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:40 executing program 0:
semctl$GETALL(0xffffffffffffffff, 0x0, 0x6, 0x0)

18:51:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:40 executing program 3:
r0 = socket(0x1, 0x1, 0x0)
fcntl$lock(r0, 0x9, 0x0)

18:51:40 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  806.342624][T15051] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  806.350091][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  806.642876][T10334] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  806.883548][T10334] usb 2-1: Using ep0 maxpacket: 32
[  806.995407][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  807.088578][T15063] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  807.089561][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  807.163127][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  807.173502][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.181667][T10334] usb 2-1: Product: syz
[  807.186319][T10334] usb 2-1: Manufacturer: syz
[  807.191069][T10334] usb 2-1: SerialNumber: syz
[  807.215326][T10334] usb 2-1: config 0 descriptor??
[  807.255083][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  807.701577][ T3559] usb 2-1: USB disconnect, device number 93
18:51:42 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:42 executing program 0:
select(0x40, &(0x7f00000011c0), &(0x7f0000001200)={0x100000001}, 0x0, 0x0)

18:51:42 executing program 3:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCOUTQ(r0, 0x40047473, 0x0)

18:51:42 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x300, 0x1e0})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0)

18:51:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:42 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x101, 0xac}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000540)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, {0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfc}, {0x1, 0x3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xe0}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb, 0x0, 0x0, 0x20]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:51:42 executing program 0:
select(0x40, &(0x7f00000011c0), &(0x7f0000001200)={0x100000001}, 0x0, 0x0)

18:51:42 executing program 3:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x5)

[  808.419590][T15080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:42 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:51:42 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x4, 0x10, r0, 0x0)

18:51:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff00000000"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:42 executing program 3:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r0, &(0x7f0000ff3000/0xc000)=nil, 0x0)

[  808.902981][T10334] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  809.163379][T10334] usb 2-1: Using ep0 maxpacket: 32
[  809.482759][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  809.492087][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.500245][T10334] usb 2-1: Product: syz
[  809.504664][T10334] usb 2-1: Manufacturer: syz
[  809.509401][T10334] usb 2-1: SerialNumber: syz
[  809.527690][T10334] usb 2-1: config 0 descriptor??
[  809.575215][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  809.963641][T10334] usb 2-1: USB disconnect, device number 94
18:51:44 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:44 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
poll(&(0x7f00000011c0)=[{r0}, {r1, 0x8}], 0x2, 0x0)

18:51:44 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000001800)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001680)=[{&(0x7f0000000040)="f7822314c281fba125254d9c703b326a4cf3d70d63a5540ee69d84805a1cbdd888c29977675635942efc809465bbf2268996e124b878faf3abdc3efa161eae2a775efc78c218c8d35d093856a4e775544b180c9c69aeb1a595bd36ee94d1799b32864bc5b3784ba0ca80c3c16e2a87978998a9", 0x73}, {&(0x7f00000000c0)="6282a8b198100882e99e113d48770b0777ab3c06ad4ae3c58d91030b77cac1fbecd66b4b491aded8fa03c6ee93ee1a5eca978c5d515c319da6bd19b31bd6ff82d768ec168ef77b466db24d04c12b0fce677a3ac494f8f279890a6127014456e60aef72fce327f987302191f3dcf6f974fee7d064eceeaef309a3ea4fe15ebcefe99c8f6a7d1d4440377cabe78ff1e73fa41dcdca3256d8b28a7ad5c18b4bf1bf2ac98500f25a240dd123a374a61203f32fd9a3e2a2e97cb71aab3d5eef82", 0xbe}, {&(0x7f0000000440)="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", 0x653}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0)

18:51:44 executing program 0:
select(0x40, &(0x7f00000011c0), &(0x7f0000001200)={0x100000001}, 0x0, 0x0)

18:51:44 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', 0x0})

18:51:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff00000000"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  810.675899][T15112] __nla_validate_parse: 5 callbacks suppressed
[  810.675968][T15112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:44 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x0, 0xf4240, &(0x7f0000000780)=@framed={{}, [@cb_func]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:51:44 executing program 0:
select(0x40, &(0x7f00000011c0), &(0x7f0000001200)={0x100000001}, 0x0, 0x0)

18:51:44 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x33fe0}, 0x1, 0x35000000}, 0x0)

[  810.944115][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  811.020012][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:45 executing program 0:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000180)='/dev/vcsa\x00')
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)

[  811.172317][ T3568] usb 2-1: new high-speed USB device number 95 using dummy_hcd
18:51:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff00000000"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:45 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x6, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x0)

[  811.442432][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  811.604383][T15130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  811.714409][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  811.744626][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  811.770506][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  811.780785][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.789413][ T3568] usb 2-1: Product: syz
[  811.793791][ T3568] usb 2-1: Manufacturer: syz
[  811.798523][ T3568] usb 2-1: SerialNumber: syz
[  811.830099][ T3568] usb 2-1: config 0 descriptor??
[  811.884995][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  812.121146][ T3559] usb 2-1: USB disconnect, device number 95
18:51:46 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:46 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000340)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000020000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000300))

18:51:46 executing program 2:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)

18:51:46 executing program 0:
socket(0x10, 0x0, 0x8)

18:51:46 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000}, 0x0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/178, 0xb2}], 0x1}}], 0x1, 0x40000002, 0x0)
sendto$inet(r0, &(0x7f0000000140)="14", 0x1, 0x0, 0x0, 0x0)

18:51:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b00"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  812.841585][T15146] loop5: detected capacity change from 0 to 1024
[  812.861016][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:47 executing program 2:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)

18:51:47 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x3, 0x9, 0x0, 0x1}, 0x48)

[  813.003625][T15146] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  813.023444][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  813.041554][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:47 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000}, 0x0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/178, 0xb2}], 0x1}}], 0x1, 0x40000002, 0x0)
sendto$inet(r0, &(0x7f0000000140)="14", 0x1, 0x0, 0x0, 0x0)

18:51:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b00"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000340)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000020000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000300))

[  813.252003][T10334] usb 2-1: new high-speed USB device number 96 using dummy_hcd
18:51:47 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000}, 0x0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/178, 0xb2}], 0x1}}], 0x1, 0x40000002, 0x0)
sendto$inet(r0, &(0x7f0000000140)="14", 0x1, 0x0, 0x0, 0x0)

[  813.502311][T10334] usb 2-1: Using ep0 maxpacket: 32
[  813.599337][T15166] loop5: detected capacity change from 0 to 1024
[  813.604997][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  813.666655][T15166] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  813.809531][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  813.819311][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.827605][T10334] usb 2-1: Product: syz
[  813.832011][T10334] usb 2-1: Manufacturer: syz
[  813.836757][T10334] usb 2-1: SerialNumber: syz
[  813.851633][T10334] usb 2-1: config 0 descriptor??
[  813.895059][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  814.165366][ T3559] usb 2-1: USB disconnect, device number 96
18:51:48 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:48 executing program 0:
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000e85000/0x1000)=nil)

18:51:48 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000}, 0x0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/178, 0xb2}], 0x1}}], 0x1, 0x40000002, 0x0)
sendto$inet(r0, &(0x7f0000000140)="14", 0x1, 0x0, 0x0, 0x0)

18:51:48 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000}, 0x0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/178, 0xb2}], 0x1}}], 0x1, 0x40000002, 0x0)
sendto$inet(r0, &(0x7f0000000140)="14", 0x1, 0x0, 0x0, 0x0)

18:51:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000340)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000020000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000300))

18:51:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b00"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  814.859762][T15180] loop5: detected capacity change from 0 to 1024
18:51:49 executing program 0:
r0 = socket(0x2, 0x3, 0x8)
recvmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x41)

[  814.994527][T15180] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
18:51:49 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000}, 0x0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/178, 0xb2}], 0x1}}], 0x1, 0x40000002, 0x0)
sendto$inet(r0, &(0x7f0000000140)="14", 0x1, 0x0, 0x0, 0x0)

18:51:49 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000}, 0x0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/178, 0xb2}], 0x1}}], 0x1, 0x40000002, 0x0)
sendto$inet(r0, &(0x7f0000000140)="14", 0x1, 0x0, 0x0, 0x0)

18:51:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:49 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000340)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000020000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000300))

18:51:49 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/vmallocinfo\x00', 0x0, 0x0)

[  815.343106][T10334] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  815.583233][T10334] usb 2-1: Using ep0 maxpacket: 32
[  815.710440][T15195] __nla_validate_parse: 7 callbacks suppressed
[  815.710506][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  815.817931][T15201] loop5: detected capacity change from 0 to 1024
[  815.863225][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  815.873598][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.882089][T10334] usb 2-1: Product: syz
[  815.886384][T10334] usb 2-1: Manufacturer: syz
[  815.891133][T10334] usb 2-1: SerialNumber: syz
[  815.951184][T10334] usb 2-1: config 0 descriptor??
[  816.004917][T15201] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  816.010390][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  816.341337][T10336] usb 2-1: USB disconnect, device number 97
18:51:51 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:51 executing program 0:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x242080, 0x0)

18:51:51 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='setgroups\x00')
write$bt_hci(r0, 0x0, 0x0)

18:51:51 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000280)='auxv\x00')

18:51:51 executing program 5:
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/184)

18:51:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  817.067546][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:51 executing program 0:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r0)

18:51:51 executing program 3:
syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{&(0x7f0000000080)="d1", 0x1, 0x8000000000}], 0x0, 0x0)

18:51:51 executing program 2:
r0 = getpgrp(0x0)
process_vm_readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/208, 0xd0}], 0x1, &(0x7f0000001900)=[{&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000400)=""/68, 0x44}], 0x2, 0x0)

18:51:51 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001400)={'batadv_slave_1\x00'})

[  817.216059][T15220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  817.284905][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  817.492078][T10336] usb 2-1: new high-speed USB device number 98 using dummy_hcd
18:51:51 executing program 3:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0)

18:51:51 executing program 2:
syz_open_dev$evdev(&(0x7f00000000c0), 0x7ff, 0x240)

[  817.732420][T10336] usb 2-1: Using ep0 maxpacket: 32
[  818.015185][T10336] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  818.024489][T10336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.032764][T10336] usb 2-1: Product: syz
[  818.037051][T10336] usb 2-1: Manufacturer: syz
[  818.041920][T10336] usb 2-1: SerialNumber: syz
[  818.052898][T10336] usb 2-1: config 0 descriptor??
[  818.095250][T10336] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  818.321033][ T3559] usb 2-1: USB disconnect, device number 98
18:51:52 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:52 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0)

18:51:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000002040))

18:51:53 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00')

18:51:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000180)="0f1cb60b00b839018ec80f785afe0f01ca6766c7442400bf6f00006766c74424020d0000006766c744240600000000670f0114240f01c30f2283f20f213b660f6f630036f326650f00db", 0x4a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  819.013711][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:53 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')

[  819.067039][T15245] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  819.078849][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:53 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)}, {0x0, 0x0, 0x80000001}], 0x0, &(0x7f0000013b00))

18:51:53 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x420}, 0x420}}, 0x0)

18:51:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:53 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

[  819.522340][ T3559] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  819.598808][T15256] loop5: detected capacity change from 0 to 264192
[  819.629382][T15259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  819.726828][T15256] EXT4-fs warning (device loop5): ext4_enable_quotas:6841: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
[  819.745136][T15256] EXT4-fs (loop5): mount failed
18:51:53 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x1a, 0x0, 0x0)

[  819.772748][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  819.782596][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  819.843491][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  820.062810][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  820.075755][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.084678][ T3559] usb 2-1: Product: syz
[  820.088984][ T3559] usb 2-1: Manufacturer: syz
[  820.093831][ T3559] usb 2-1: SerialNumber: syz
[  820.201663][ T3559] usb 2-1: config 0 descriptor??
[  820.245799][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  820.478322][T10336] usb 2-1: USB disconnect, device number 99
18:51:55 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:55 executing program 5:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x2c, 0x66, 0x0, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x6}, {0x5, 0xffe0}, {0x3}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040800)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x11, @private, 0x0, 0x1, 'lblcr\x00'}, 0x2c)

18:51:55 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:51:55 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

18:51:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:55 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x22, &(0x7f0000000040)={@multicast1, @multicast1}, 0xc)

[  821.185025][T15278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:55 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010000fefffffffffffffeffffff0000000000000000000000007f1852c9a500000c0000000000d1582ec9f400000000000002"], 0xb8}}, 0x0)

18:51:55 executing program 5:
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6)

18:51:55 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

[  821.341263][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  821.368193][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:55 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

[  821.592270][T10334] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  821.642829][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
18:51:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:55 executing program 5:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0x40, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0)

[  821.832394][T10334] usb 2-1: Using ep0 maxpacket: 32
[  821.986093][T15299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  822.086852][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  822.111143][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  822.142427][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  822.151674][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.160323][T10334] usb 2-1: Product: syz
[  822.164804][T10334] usb 2-1: Manufacturer: syz
[  822.169526][T10334] usb 2-1: SerialNumber: syz
[  822.181226][ T1195] ieee802154 phy0 wpan0: encryption failed: -22
[  822.187955][ T1195] ieee802154 phy1 wpan1: encryption failed: -22
[  822.273837][T10334] usb 2-1: config 0 descriptor??
[  822.326253][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  822.563223][T10334] usb 2-1: USB disconnect, device number 100
18:51:57 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

18:51:57 executing program 3:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0x40, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, 0x0)

18:51:57 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:51:57 executing program 5:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0x40, 0x0)
utimensat(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

18:51:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:57 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  823.258223][T15311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:57 executing program 5:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0x40, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0)

[  823.386614][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:57 executing program 2:
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, 0xffffffffffffffff, 0x0)

18:51:57 executing program 3:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0x40, 0x0)
epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:51:57 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:51:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  823.752241][T10334] usb 2-1: new high-speed USB device number 101 using dummy_hcd
18:51:57 executing program 2:
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, 0xffffffffffffffff, 0x0)

18:51:57 executing program 5:
nanosleep(&(0x7f0000000040)={0x0, 0x13000000}, 0x0)

18:51:57 executing program 3:
socketpair(0x1, 0x5, 0x1, &(0x7f0000000000))

[  824.002196][T10334] usb 2-1: Using ep0 maxpacket: 32
[  824.025405][T15332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:51:58 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:51:58 executing program 2:
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, 0xffffffffffffffff, 0x0)

18:51:58 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2, 0x0)

[  824.292827][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  824.302598][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.310757][T10334] usb 2-1: Product: syz
[  824.315225][T10334] usb 2-1: Manufacturer: syz
[  824.319949][T10334] usb 2-1: SerialNumber: syz
[  824.382877][T10334] usb 2-1: config 0 descriptor??
[  824.445099][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  825.025645][ T3559] usb 2-1: USB disconnect, device number 101
18:51:59 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:51:59 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:51:59 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000001540)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f00000014c0)=[{&(0x7f0000000080)="1d3370387172f382cbaf2db921d9a7c56917d273100c2aaacf669ad3989d2b499ef86802a31d9a799d02f2761a72c4b5c36bb7cea369bbab5638fa8eddbf21e4a922bfdf7ca3fe9e1ab65062a6cee5fc2bd19b7524e14d2f6f310d8bc264b42028a34430565125eb14a5bc08", 0x6c}, {&(0x7f0000000100)="167c2bdac118f1a85f00ea31da89bf2cc467e992bdc162cd027bac8836add5833cf487daca", 0x25}], 0x2}, 0x0)

18:51:59 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

18:51:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:51:59 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x0)
getsockname(r0, 0x0, &(0x7f00000001c0))

18:51:59 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

18:51:59 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:51:59 executing program 5:
r0 = socket$inet6(0x18, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000000), 0x4)

18:52:00 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

18:52:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  826.212268][T10334] usb 2-1: new high-speed USB device number 102 using dummy_hcd
18:52:00 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/class/hwmon', 0x201202, 0x0)

[  826.462159][T10334] usb 2-1: Using ep0 maxpacket: 32
[  826.527932][T15377] __nla_validate_parse: 3 callbacks suppressed
[  826.528001][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  826.617984][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  826.763490][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  826.772916][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.781060][T10334] usb 2-1: Product: syz
[  826.785502][T10334] usb 2-1: Manufacturer: syz
[  826.790233][T10334] usb 2-1: SerialNumber: syz
[  826.851071][T10334] usb 2-1: config 0 descriptor??
[  826.896166][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  827.288576][ T3559] usb 2-1: USB disconnect, device number 102
18:52:01 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:01 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:01 executing program 3:
renameat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, 0x0)

18:52:01 executing program 5:
syz_mount_image$fuse(&(0x7f0000002a00), &(0x7f0000002a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, ',6\''}}]}})

18:52:01 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

18:52:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  827.970929][T15391] fuse: Bad value for 'fd'
[  828.014872][T15392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:02 executing program 3:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop8', 0x0, 0x0)

18:52:02 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:02 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_RESIZE(r0, 0x4b4b, &(0x7f0000000080)={0x8000})

18:52:02 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

[  828.254737][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:02 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x4000000000000072, 0x16b801)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

18:52:02 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

[  828.503155][T10334] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  828.692873][T15408] usb usb4: usbfs: process 15408 (syz-executor.3) did not claim interface 0 before use
[  828.743218][T10334] usb 2-1: Using ep0 maxpacket: 32
[  829.022372][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  829.031601][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.039966][T10334] usb 2-1: Product: syz
[  829.044396][T10334] usb 2-1: Manufacturer: syz
[  829.049124][T10334] usb 2-1: SerialNumber: syz
[  829.069772][T10334] usb 2-1: config 0 descriptor??
[  829.114845][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  829.500462][ T3559] usb 2-1: USB disconnect, device number 103
18:52:04 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x0, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:04 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_RESIZE(r0, 0x4b4b, &(0x7f0000000080)={0x8000})

18:52:04 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, r0, 0x0)

18:52:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:52:04 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)

18:52:04 executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

[  830.198695][T15423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:04 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000680), 0x0, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000006c0))

[  830.298576][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:04 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_RESIZE(r0, 0x4b4b, &(0x7f0000000080)={0x8000})

18:52:04 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x0, 0x8012, r0, 0x0)

18:52:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f0000", @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  830.612347][ T3559] usb 2-1: new high-speed USB device number 104 using dummy_hcd
18:52:04 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_RESIZE(r0, 0x4b4b, &(0x7f0000000080)={0x8000})

[  830.861968][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  830.898463][T15439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  830.990409][T15442] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  831.015973][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  831.212981][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  831.222946][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.231116][ T3559] usb 2-1: Product: syz
[  831.235542][ T3559] usb 2-1: Manufacturer: syz
[  831.240302][ T3559] usb 2-1: SerialNumber: syz
[  831.274507][ T3559] usb 2-1: config 0 descriptor??
[  831.315033][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  831.558820][T10334] usb 2-1: USB disconnect, device number 104
18:52:06 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x0, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:06 executing program 3:
r0 = gettid()
sched_setparam(r0, &(0x7f0000000000)=0x9)

18:52:06 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x0, 0x8012, r0, 0x0)

18:52:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:06 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x4000000000000072, 0x16b801)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0xc43c, 0x4, [{}, {0xa, 0x1}, {0xc, 0x1}, {0xe, 0x1}]})

18:52:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f0000", @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:52:06 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x73, 0x141c01)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000340)={0x0, "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"})

[  832.273754][T15455] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:06 executing program 5:
symlinkat(&(0x7f0000002000)='./file0\x00', 0xffffffffffffff9c, 0x0)
syz_mount_image$erofs(&(0x7f0000002080), &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005280))
syz_mount_image$vfat(0x0, &(0x7f0000005c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

18:52:06 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x0, 0x8012, r0, 0x0)

[  832.484435][T15455] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  832.536704][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:06 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x12dd, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48)

18:52:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:06 executing program 5:
syz_mount_image$fuse(0x0, &(0x7f0000002a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  832.773326][T10334] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  833.022543][T10334] usb 2-1: Using ep0 maxpacket: 32
[  833.332835][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  833.342194][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.350289][T10334] usb 2-1: Product: syz
[  833.354744][T10334] usb 2-1: Manufacturer: syz
[  833.359471][T10334] usb 2-1: SerialNumber: syz
[  833.369219][T10334] usb 2-1: config 0 descriptor??
[  833.431980][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  833.653154][T12094] usb 2-1: USB disconnect, device number 105
18:52:08 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x0, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f0000", @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:52:08 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x10, r0, 0x0)

18:52:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

18:52:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:08 executing program 5:
syz_mount_image$erofs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]})

[  834.365976][T15488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

[  834.485491][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:08 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop8', 0x0, 0x0)
flistxattr(r0, &(0x7f0000000180)=""/6, 0x6)

[  834.555904][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:08 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x10, r0, 0x0)

18:52:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

[  834.802166][T10334] usb 2-1: new high-speed USB device number 106 using dummy_hcd
18:52:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00000000000000", @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:52:09 executing program 5:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000300))
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)

[  835.052430][T10334] usb 2-1: Using ep0 maxpacket: 32
[  835.248290][T15504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  835.362502][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  835.373010][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.381177][T10334] usb 2-1: Product: syz
[  835.385620][T10334] usb 2-1: Manufacturer: syz
[  835.390363][T10334] usb 2-1: SerialNumber: syz
[  835.404941][T10334] usb 2-1: config 0 descriptor??
[  835.406222][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  835.451422][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  835.457580][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  835.715366][T10334] usb 2-1: USB disconnect, device number 106
18:52:10 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:10 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x10, r0, 0x0)

18:52:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

18:52:10 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:10 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x73, 0x141c01)
ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0xc0105512, &(0x7f0000001200))

18:52:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00000000000000", @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  836.416514][T15518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:10 executing program 2:
openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, 0xffffffffffffffff, 0x0)

18:52:10 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f000000ac00)={0x2020, 0x0, <r1=>0x0}, 0x2020)
mount$fuse(0x0, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x100000000401, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r2=>0x0}, 0x2020)
lchown(&(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0xfffffffffffffffe, r2}, 0x50)

18:52:10 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00000000000000", @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:52:10 executing program 2:
openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, 0xffffffffffffffff, 0x0)

18:52:10 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

[  836.893869][ T3559] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  837.142084][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  837.423029][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  837.432970][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.441242][ T3559] usb 2-1: Product: syz
[  837.445712][ T3559] usb 2-1: Manufacturer: syz
[  837.450452][ T3559] usb 2-1: SerialNumber: syz
[  837.557460][ T3559] usb 2-1: config 0 descriptor??
[  837.605444][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  837.919385][ T3559] usb 2-1: USB disconnect, device number 107
18:52:12 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:12 executing program 2:
openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x10ef, 0x3000007, 0x8012, 0xffffffffffffffff, 0x0)

18:52:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

18:52:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/18, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:52:12 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x409, 0x0)

[  838.627188][T15556] __nla_validate_parse: 5 callbacks suppressed
[  838.627257][T15556] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040))

18:52:12 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000001bc0))

[  838.793581][T15556] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

[  838.846683][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  839.032587][ T3559] usb 2-1: new high-speed USB device number 108 using dummy_hcd
18:52:13 executing program 5:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x420e40, 0x0)

18:52:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/18, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:52:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000100))

[  839.272530][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  839.467314][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  839.576116][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  839.585701][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.594221][ T3559] usb 2-1: Product: syz
[  839.598514][ T3559] usb 2-1: Manufacturer: syz
[  839.603359][ T3559] usb 2-1: SerialNumber: syz
[  839.619319][T15580] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  839.662237][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  839.720044][ T3559] usb 2-1: config 0 descriptor??
[  839.770777][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  840.099549][ T3559] usb 2-1: USB disconnect, device number 108
18:52:14 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:14 executing program 5:
socket(0xa32c44702de0bd39, 0x0, 0x0)

18:52:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000002280)={0x0, 0x6})

18:52:14 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

18:52:14 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00', 0x3, 0xdb, &(0x7f0000000200)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/18, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  840.806314][T15592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:15 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f000000b100)=[{{&(0x7f0000001540)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001880)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x44881)

[  840.893852][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  840.919000][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:15 executing program 5:
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, r0)

18:52:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, 0x0)

18:52:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100))

18:52:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/19, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  841.242316][ T3568] usb 2-1: new high-speed USB device number 109 using dummy_hcd
18:52:15 executing program 5:
clock_gettime(0x0, &(0x7f00000022c0)={0x0, <r0=>0x0})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002300)={0x0, r0+60000000})

[  841.482530][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  841.562979][T15612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  841.792942][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  841.802458][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.810619][ T3568] usb 2-1: Product: syz
[  841.815306][ T3568] usb 2-1: Manufacturer: syz
[  841.820033][ T3568] usb 2-1: SerialNumber: syz
[  841.937676][ T3568] usb 2-1: config 0 descriptor??
[  841.986725][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  842.305975][ T3568] usb 2-1: USB disconnect, device number 109
18:52:16 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:16 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)

18:52:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, 0x0)

18:52:16 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth1_virt_wifi\x00', &(0x7f0000000280)=@ethtool_stats})
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg(r1, &(0x7f0000002b80)={&(0x7f0000002440)=@xdp, 0x80, &(0x7f00000025c0)=[{0x0}], 0x1, &(0x7f0000002600)=[{0x10, 0x0, 0x0, "b5"}, {0xc}], 0x1c}, 0x0)

18:52:16 executing program 2:
openat$null(0xffffff9c, &(0x7f0000000000), 0x8c040, 0x0)

18:52:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/19, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:52:17 executing program 2:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil})

18:52:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000008540)={'tunl0\x00', &(0x7f0000008500)=@ethtool_eeprom={0x7}})

18:52:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, 0x0)

18:52:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'vlan0\x00'})

18:52:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/19, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  843.422075][ T3568] usb 2-1: new high-speed USB device number 110 using dummy_hcd
18:52:17 executing program 2:
socket$inet(0x2, 0x0, 0x7f)

[  843.682188][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  843.782328][T15651] __nla_validate_parse: 5 callbacks suppressed
[  843.782392][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  843.888557][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  843.916060][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  844.007493][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  844.017043][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.025387][ T3568] usb 2-1: Product: syz
[  844.029675][ T3568] usb 2-1: Manufacturer: syz
[  844.035263][ T3568] usb 2-1: SerialNumber: syz
[  844.082616][ T3568] usb 2-1: config 0 descriptor??
[  844.141422][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  844.398319][ T3568] usb 2-1: USB disconnect, device number 110
18:52:19 executing program 3:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5608)

18:52:19 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:19 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001080)={'wlan0\x00'})

18:52:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280))

18:52:19 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

18:52:19 executing program 2:
syz_emit_ethernet(0x7a, &(0x7f0000000600)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '&`K', 0x44, 0x2f, 0x0, @private1, @mcast2}}}}, 0x0)

[  845.135256][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:19 executing program 2:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

18:52:19 executing program 3:
syz_mount_image$f2fs(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x0, 0x1, &(0x7f0000002680)=[{0x0}], 0x0, &(0x7f0000002740))

18:52:19 executing program 5:
syz_emit_ethernet(0x22, &(0x7f0000000040)={@broadcast, @remote, @val, {@ipv4}}, 0x0)

18:52:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280))

[  845.308684][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  845.492003][T10920] usb 2-1: new high-speed USB device number 111 using dummy_hcd
18:52:19 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

18:52:19 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x48, &(0x7f0000000080), 0xc)

[  845.752056][T10920] usb 2-1: Using ep0 maxpacket: 32
18:52:19 executing program 2:
syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv4}}, 0x0)

[  845.919865][T15686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  846.071632][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  846.086936][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  846.097029][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.105279][T10920] usb 2-1: Product: syz
[  846.109587][T10920] usb 2-1: Manufacturer: syz
[  846.114487][T10920] usb 2-1: SerialNumber: syz
[  846.135595][T10920] usb 2-1: config 0 descriptor??
[  846.189099][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  846.433515][T10920] usb 2-1: USB disconnect, device number 111
18:52:21 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:21 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x98)

18:52:21 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x55, 0x0, 0x0)

18:52:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000002280))

18:52:21 executing program 2:
unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x800)

18:52:21 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

[  847.120257][T15703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:21 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000080)={@rand_addr=0xc7}, 0xc)

18:52:21 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [<r2=>0x0]}, &(0x7f0000001700)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x8)

18:52:21 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0x4a, 0x0, 0x0)

[  847.300895][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:21 executing program 0:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @val, {@ipv4}}, 0x0)

18:52:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

[  847.602419][ T3568] usb 2-1: new high-speed USB device number 112 using dummy_hcd
18:52:21 executing program 2:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000540)="b1a6df1255fbefbd", 0x8, 0x0, &(0x7f00000001c0)={0x1c, 0x1c, 0x1}, 0x1c)

[  847.853261][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  847.964086][T15725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  848.133845][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  848.143659][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.152003][ T3568] usb 2-1: Product: syz
[  848.156298][ T3568] usb 2-1: Manufacturer: syz
[  848.161021][ T3568] usb 2-1: SerialNumber: syz
[  848.251045][ T3568] usb 2-1: config 0 descriptor??
[  848.295541][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  848.523425][T10920] usb 2-1: USB disconnect, device number 112
18:52:23 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:23 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0xa, 0x0, &(0x7f0000001240))

18:52:23 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)

18:52:23 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001d40)={&(0x7f0000000780)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080), &(0x7f0000000180)=0x98)

18:52:23 executing program 2:
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000fea000/0x14000)=nil, 0x14000)
shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x3000)

18:52:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

[  849.215011][T15740] __nla_validate_parse: 1 callbacks suppressed
[  849.215091][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:23 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f0000000040), &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

18:52:23 executing program 2:
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv4}}, 0x0)

18:52:23 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, 0x0, 0x52, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10)

18:52:23 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x1b, &(0x7f0000000080), 0xc)

[  849.389233][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  849.612435][ T3568] usb 2-1: new high-speed USB device number 113 using dummy_hcd
18:52:23 executing program 2:
syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0)

18:52:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

[  849.862448][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  850.083490][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  850.143058][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  850.152576][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.160721][ T3568] usb 2-1: Product: syz
[  850.165410][ T3568] usb 2-1: Manufacturer: syz
[  850.170149][ T3568] usb 2-1: SerialNumber: syz
[  850.212743][ T3568] usb 2-1: config 0 descriptor??
[  850.214611][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  850.255159][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  850.481084][ T3568] usb 2-1: USB disconnect, device number 113
18:52:25 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:25 executing program 5:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c)

18:52:25 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, @in, 0x0, 0x4, 0x10}, 0x98)

18:52:25 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x24, &(0x7f0000000000), &(0x7f0000000140)=0x98)

18:52:25 executing program 3:
r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000)
r1 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x1000)

18:52:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

[  851.163708][T15775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:25 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x10}, 0x10)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000040), &(0x7f0000000080)=0x8)

18:52:25 executing program 0:
syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @local, @val, {@ipv4}}, 0x0)

[  851.366667][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:25 executing program 2:
fcntl$setown(0xffffffffffffffff, 0xe, 0xffffffffffffffff)

18:52:25 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x0)

18:52:25 executing program 0:
syz_emit_ethernet(0x8b, &(0x7f0000000040)={@local, @remote, @val, {@ipv4}}, 0x0)

[  851.742348][T10920] usb 2-1: new high-speed USB device number 114 using dummy_hcd
18:52:25 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x42)

[  851.990289][T10920] usb 2-1: Using ep0 maxpacket: 32
[  852.272721][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  852.282104][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.290270][T10920] usb 2-1: Product: syz
[  852.294753][T10920] usb 2-1: Manufacturer: syz
[  852.299475][T10920] usb 2-1: SerialNumber: syz
[  852.310338][T10920] usb 2-1: config 0 descriptor??
[  852.355434][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  852.587341][ T3568] usb 2-1: USB disconnect, device number 114
18:52:27 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

18:52:27 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, @in, 0x1, 0x0, 0x0, 0x0, 0x22a7}, 0x98)

18:52:27 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000340), 0x90)

18:52:27 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x17, &(0x7f0000000080), 0xc)

18:52:27 executing program 5:
mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0)

[  853.303299][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:27 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x7}, 0x10)

18:52:27 executing program 3:
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000)

18:52:27 executing program 5:
syz_emit_ethernet(0x84, &(0x7f0000000000)={@broadcast, @random="2cf4aa7f23f6", @val, {@ipv4}}, 0x0)

18:52:27 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000001240))

[  853.503369][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:27 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r1, r0)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x8)

18:52:27 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0x17, 0x0, &(0x7f0000001240))

[  853.752180][ T3559] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  854.012186][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  854.352400][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  854.361904][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.369982][ T3559] usb 2-1: Product: syz
[  854.377747][ T3559] usb 2-1: Manufacturer: syz
[  854.383188][ T3559] usb 2-1: SerialNumber: syz
[  854.391534][ T3559] usb 2-1: config 0 descriptor??
[  854.435102][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  854.665186][ T3559] usb 2-1: USB disconnect, device number 115
18:52:29 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

18:52:29 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}, 0x14)

18:52:29 executing program 5:
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4)

18:52:29 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = dup2(r1, r0)
connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10)
recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/186, 0xba}, 0x0)

18:52:29 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)=0x8)

[  855.399400][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:29 executing program 2:
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)

18:52:29 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)

18:52:29 executing program 0:
syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv4}}, 0x0)

[  855.606491][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:29 executing program 3:
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5)

18:52:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)

[  855.863825][ T3559] usb 2-1: new high-speed USB device number 116 using dummy_hcd
18:52:30 executing program 2:
r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
r1 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x3000)
r2 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
r3 = shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x3000)
shmdt(r3)

[  856.112344][ T3559] usb 2-1: Using ep0 maxpacket: 32
[  856.132514][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  856.333979][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  856.426095][ T3559] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  856.435426][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.443706][ T3559] usb 2-1: Product: syz
[  856.448000][ T3559] usb 2-1: Manufacturer: syz
[  856.452809][ T3559] usb 2-1: SerialNumber: syz
[  856.497287][ T3559] usb 2-1: config 0 descriptor??
[  856.545246][ T3559] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  856.788649][ T3559] usb 2-1: USB disconnect, device number 116
18:52:31 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:31 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000040)={0x2, "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"}, 0x102, 0x0)
msgrcv(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xba, 0x2, 0x0)

18:52:31 executing program 0:
syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @remote, @val, {@ipv4}}, 0x0)

18:52:31 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0xb, 0x0, &(0x7f0000001240))

18:52:31 executing program 3:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="8bbade45ae57", @empty, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0xf, 0x0, @remote, @loopback, @remote, @remote={0xac, 0x14, 0x0}}}}}, 0x0)

18:52:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)

[  857.478318][T15883] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:31 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000)=0x8, 0x4)

18:52:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x14, &(0x7f0000000080), 0xc)

18:52:31 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x24, &(0x7f0000000000), &(0x7f0000000140)=0x98)

18:52:31 executing program 5:
r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000)
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5)

[  857.706285][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  857.942384][T10920] usb 2-1: new high-speed USB device number 117 using dummy_hcd
18:52:32 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @empty, @val, {@ipv6}}, 0x0)

18:52:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)

[  858.183005][T10920] usb 2-1: Using ep0 maxpacket: 32
[  858.346891][T15906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  858.445433][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  858.477130][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  858.486496][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.495501][T10920] usb 2-1: Product: syz
[  858.499830][T10920] usb 2-1: Manufacturer: syz
[  858.504646][T10920] usb 2-1: SerialNumber: syz
[  858.530965][T10920] usb 2-1: config 0 descriptor??
[  858.587840][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  858.816323][T10920] usb 2-1: USB disconnect, device number 117
18:52:33 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:33 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0), 0x88)

18:52:33 executing program 3:
syz_clone(0x20004000, 0x0, 0x0, 0x0, 0x0, 0x0)

18:52:33 executing program 5:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{']p\x1b'}]})
setxattr$security_ima(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0, 0x0)

18:52:33 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1, "ed9df392b7c9c3a7f1e348f4d64cf9844c973d7068dead312022fc552e453dd40f5ed54b4f05373f69cbff9b1cae7d2dcc12887fe13250d959f78a02e7c6dcf1caf8bfa100c56baa87bbd2eb5e2e54a6aadbdcbdafe851a5d7c45049fbb8503d7e9a752741f127ed9669d7db3ad8350bd5d35f6a3044f4089a7c69a4f5d70bba7131927af4ddc7ccbb0c2767d48b3e5463214ef5f4b6aa2453afe8757e5ac19510921971219e5c1ee927f27e8e5292fc933c59004121a2774fbb865b2b60b047758bc3b41fa424e98820a0ae236d96f3167f9f611ec865dc87ad35737b4bf954d156f0caeb5fb7b8642b5efc1d2a0e0b5e3fbcf7116a8df4927854ee9ab80f93c7be25a91cb7a17f06e329dac1afd15f29c90cb9fb2a14d249e715363f13ce335437036fe34e5862cf548b1bf94eda4850d40ba41b9fd385f2281a3d1b4f665f6140c983f5c795fca5b31a7b3a0e9209f559b831b201848b590775baf97fb6af8d06949b43854f5cdc7517e20523cd5686e59b751256d8a41f01b7bee5451be98386996c0eed607481f815d9066437b13f029fc983680cde3d22eef6bf0320b14cd0a360c06158871d2a008956659fed1e4ed0b47abb9c21251168ea95c6e3309c3adae567b3a44f4891ac2f3a2712cc6e7e18e22c3aad6132870cc1d157d8c2a502ee0f0b493b43df974b9c4aae3a756f505b3f0ac2ceabd8e10b6717ac867e6c65ba394cc3c543eeeb79718c62cbd6badaeb645701cc758e78644b21254250aa9d40147d0b15dbacc07f66e987fb8dfced8d8da6db0f8996323d7ca144ca1ca09bac0c2df0d64a9978defd153b045427672af11e9bd9d639f5f00f61194280a6e8eb6ffa75a9756ea1fb4c07f2030346ca76fc79f1b76f7ed8cb462843f7ddb45b30ea7a4a95416f1e9cd46d6272e8fb0b067b9e5fc7ba6c0cfbfc9fe25602aafea4a08eee13939a100d4d2514a9cb8d298d524911062f4c6e74fb42a7a21d88947611a6a1a9328afceda3c3cad2b903fca50b2a5cbc3eccb235a10646e183fe00f80dbff307696e5aefe04c0fac3be4f3f8e2c6b66d8ef3c70cc9f60b434b0788c27dde66e1b7d3ca609abaa9a81abac566fb5bee3a15fe7447a4d23daa40627d8f0b087bea54952e2687b9b81958d049ff5edce2e89c89e234fbb2e3dbcde4ecb878ec5e9473b5f52f5ba6af4f285c5d92be77bbe569c3ed6679b524cfcb134d1147a8bf1bdfba63cfb1be33786c49b2a2e79a0f47f25d84d83a5fd526583a4a3a594bd25387c309f3c495028c48b1c0004c8a4dcf876a895bb824d3c1d428c48ffc43335c6d6e8688350a32ec4b5b622f56a112796c9a0fcb07ccdcc336d121c4d1d8986ee2a563517a1e10fe2903230989677e45c83342bad2e8dfb355409d68b4f88bd13e37e28b3b063ef820869ec97c75cbd2458b5c51afe46dc1f90c8753b8431e3d8ab9f351632f95f9619ad83d3c387a8806c93cb5f5609ed9455595abcdaeff3e82a6aaa481cce50a18be7a5fbb45b6dd1ddca2eff8df917abf5bbe580aa71826c734d47e7ea9ed584a1d3f2cc23bbb096d54c05d46082d2dbb8e1697de813cfed3553c5ef3db80fa8aa6feb168487434a9581eaff1d7008422098ac71ff2afeaf4b2dcebc1c15a632246c7d7e1355a5beab9018595095f1f2ce35ecc2d3d619868ff488771f42828e93c52b6ad971c0a95625f95ea4f4db2923446d22acc4a87e80e955bd3fad0df0a01481e3ec28f08ecbb70a979bd16edb284340e83d3fdc0b5e7d01727345bc7ae6146180714c0463d4a32de2b1e5c41a21e2a3e576a895e6d5599aa77c38d394e229ada9dca494d89f92eef930ad2b381f510eae4dee2ad1303b6df79bf3257dd42faa0d62a6b3d0b34dc4babc8ae680818b7871faf4c1f4c77cb833c078bcd5eb253a01ec014a7198f419e748aec3860d3e0bd0b291c72dc38b45a17f0b047e881f412f2cdbb52fd489ce1313086c15c073509b9e433c9cad87fa568a9f059546b09e8a302da4c74d6e7d79da59d27470ffe40c43fcacd10e0e85d2b4459887c8a751c44e922cb5c5566c13c96c3f43b374d995f6db2fcc4f93211541dc7b9fc45d62e6c39133de46ce6d0bba9202819553ca269101616cbf5ae343e7b4a5e9f73848099d1a2842a3e43883cfbf62ff073f0425b3b702eb5c4d368e85d0aa79d054e81df6ae4f5f97d21a1765387c40b70e76bb235382cf2ed4aa80ea409fbb6a4fe9a516224aae056bd89c7587287977aabaf9961fba975edc01851eac0ceefa6e233fdeb8191aba9c97b67a9c884d9e6060be43cfe9f600de0a5ce09834ed338101cf685b1223c19eeaabab5caf69d7e2cc2c0f10b3ef9a8ed1ead163a9f80d767f04e6fc250a66dc77784fa24afb412c3148fbc28a280495465808afee745873bc17b7f483722d03d2f65587215179321539e81e7f62098b4599dbd904d9a3ae8b6e2d3a25c54e2a823e854a1e9c3860cf6201c2407f0c157a891150c436ee12d1dd8c36b00d0cd7b433e9e9b7642fd40b2bdfa6a0b8373c6b47c6524e06c42299eda784505901459bdb7350f9cdce4d7794d2af1cc048ed9f49b463291c5538e252d423d24e76397c3662591bb80ebb3826d4f22d991b06ee5bd221f21e8de93b2c35aa839f3a8cbeb36ae2b63ed19e53a9e864aefe74553403ef4e317a774c0a3d52e8a88988ffd74b0a1bd0443e422f5fbd833c525f3f86769ec0ca738981f02ec2c2f1773d5f499e75c7f43b7375f86a09b8f0ec872f0047e10c8826207b3e2d5a4634231c2e8c8ef6dc35eba254446eb97f22570d72b551f15a05b960ba5132059d3e53ebd7ae58a237fed55d043a29b159d6d34d38711cdd9aef555cc6eb0f9fa6899ded798f54d2e3d53526d22f15ca3917ce0b82aa78897271701b71a849ce0c5c660ea34034a40595f17b9dc880b8d7509ffc225adda7fef0ce2b21244b26168d639ea5e949ebc6f4ce702f6f7364459091a9697d53fb084302f056b4c5410d34d18d439aae1b4521094d921eeed33885dfdc610b4484155c9683c9ac4a4827c436c08e6ca93c5b9ee878fdf73d90d5b7d75e3370c18b99c74a8427e74571f82131be37cc0bfdc74a422e447b964e8d5a40433ee4583a72a6eea9a6b5c71212c3bb791ed58ae4794a1696913981fd344c3501267b6d272bb9697cb423acc9cba2f3e5e81e50ae90c3dd9c2cd66042c98cd8d2cdb27fbc5c2ffc4bcc192125d6544dafc4a0c0bf189620819e1fe6c229de9e2323c197f4b1683db8e2e9e71a5dbb44d1ee78f00fbac3eaa220ab80684d6e65f1443d2c0db8ef499ff70bf5cadeac9eba7e60e027b68b293eea93260d76958979193f0aaaaffde2e141fcfbba24429d796d9d674db27c62e6fb82946bf1b57c0de89b60f0595be52be77fb67333918725783c8ea58de31ad3fb5e8ef964f80d145fd8111c6577e4216b40db5173242e00ca79e31a9751d5f5cc5ebc47af914c489c93ae3dffd5c82b5960a130c21c94cd01e24f4af0a1888cfd409e3bc1013800bd12b4d915f3c15290de8c6a95cdd534d8617578f76ff7abac13d13ff61e02237c5ebd2179145d6f9c5ba9233430ba381c5c3847b087a372343612da16c2db6cb00c91cd374eb6abcfbb6a3cf65ceabcafa2c8743aad1a91fd41a3564ca4b8b787307a5a15642494f352b12d96915a3d9facef540c8e4c4dda20bd4fa1a1e9d73b8b3e7b171be7f019fa22dc970472f3086e11fe8fe524b50057b734d1e25e1013d626d9bf2287d49f454090c867c41f5e1d4f76965ac782f468389dc3c38db97055e47d964c0e4bf846849576c896b30d99b3d80133e80380eeb510e204cd878e2e74eb6daa422cba81afc97c712e9fe33aaef35ef9236a3a4843e9c6a1f905c856765497873552394798b5fff7d1c66d565f1067fe6cbf59de7f52127d1c08a5a9fd1f4041f42f92f185d96137dc49ef785c846bbb3291db229a367d7483f91c7496baee9f315a280b5835adc24bfa323ae11b175dd557d541a8ae793b5e01381cd9e43d9429deb5aa1b6f09309aa0d5e7df1b2df300517b53a58aaa7f6417f01f693b83f8da08570b4693a3ef51ae880c4a570137ad760000bc5cab252796c4a062d356bd9e07aee77214e016c43c9913d5e1ad99d4a8802fad8dff2e59185c7a2af865dfface8eea33073a628dfc1a607dab08bf7af8ef1e53fb3b0031aff2084463d5e4152a008ca8d9637f7e2b24e57c2767c0814daf5efd917ef88f172b443b084f44250ae9e0bb877b5dc7614256fbf437b25b30b0b830fdbe0d1c219e7e62c4985c1fd800352fe286407de67298b494611637b07e4f39357aad8068dd9da65c5a33d68c028c536c43024185db6bbf976c771c2eaab6371936e5d2f91cf703f70ee8b0763661bc4e6c4e603672bd85d154354fc5e296ea018d1b64070f9309582f7b529cbd2486e9bb64a78074285719c3376b1e4e69e55d568f5c01bb19c97195c7e36d316a3db2a995e1d7498d149d70614f9b59424dbec9a8de4b7d036deb45d23ed80b415d441f596bf8b53bce2786a22dd4ff4c39d4b91439b98758db94b6f0bf94e311faeaffadf34a1e0406c4490a991581c7b17acbb19f92015bcf2b59efa52082efefb5f93317dd346acac15316c72973127e8f4b090747b726d49240460e4377355db7b644b019cb525663f8805fa0b6b54601e743d80c04e784123ea342f2421e08b5b6993d63a38c8105558d9e00c456761a0e3c0809dc41c0572e91d95576337c370118ac305f7c176be56b981a44a5b3cebb885715d06fccd6135854d2b778604b496955538f5c176513620d3dbf475af46e3f5db3f50ad345b8f4819319969f832f92798e3c9c24e0df7b2fc8aeea18b6fdf79719e4137152319a40054564b156ff5449a4235c1e8bee5633ba3bb0cc07b383616c082e77522060ba74d035dfddc40ac2b1b5c1afeccc6466bfa5af6e96102744c7ea80d75d81e70247fd03dca1918ffe38a5e73d7cc52e982540207deee4524b74475f6320a15de55613b619b8e1c90521a834c1ed51bb3efd61db2088b7f7f4a2220fb63c580dba602d5f9ea981657f0cf1711eebe2cff0f2413fbf87ae35b068b7ee94c0498a8877f18fddf177d59d5a60d846081979c28a0db7312a342d3a4abeb230bfb7f543a84f64884a1f396ed9ae95042dfc5b18c321f0adeae8c9c232e125b861a8e9fe1fca12b39e06afc5392fb4a23fccd5232c4950afd669029b8685409323c99fe1562a5b2875056e3e19c779e4d5877160229c2f764e62536b49373ca44e0730f2e0deb29a776c5b13e5946f384a899b7ef8eeb593366d100c7ddb8f4335b4bfc19829e362182bf1fe8e550f1e57ced1726b8a4ab2965a7fdb6b4c13d2834f040693769d749d38404b00a01586e9c2cf22d4925d9ad2dd2b828c7a83c988de0150221f5cb62026bb4202b628d40f36f1234c27eeda5a6b21078068b0ac68cb87e073e230e5a8cac602e4d372bff7e700a40b8a701f28fa7f1d5471356a864e27cd49bf6b6ef77ef437059d052639301795fa6d85767f8de73573c122a732d13f4d5ae13aa65484263d75bf622b0dff46fac266303cc1da1eb9a18ae00bc0d1962a996fc587b0ff1532eaf2acac889f61aa360bee29e3fd5c740e898450082ddc54179b0c6abfa7b7b6eaa55ea1b7a0146ea23829b708b6ca1f18e"}, 0xfd1, 0x800)

18:52:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  859.554606][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  859.558430][T15918] squashfs: Unknown parameter ']p'
18:52:33 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)

[  859.694270][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:33 executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]})
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)=ANY=[], 0x103, 0x0)

18:52:33 executing program 5:
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000700)={[{@mode}]})

[  859.932103][T10920] usb 2-1: new high-speed USB device number 118 using dummy_hcd
18:52:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

18:52:34 executing program 3:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x2, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x0, &(0x7f0000000440)={[{']p\x1b'}], [{@fowner_eq}]})
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setxattr$security_ima(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), &(0x7f0000002100)=@v2={0x0, 0x0, 0x0, 0x0, 0x8, "47d7645ea6a90eae"}, 0x11, 0x0)

18:52:34 executing program 2:
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000700))

[  860.192784][T10920] usb 2-1: Using ep0 maxpacket: 32
[  860.222623][T15935] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  860.230158][T15935] UDF-fs: Scanning with blocksize 512 failed
[  860.375027][T15935] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  860.382851][T15935] UDF-fs: Scanning with blocksize 1024 failed
[  860.412820][T15935] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  860.421275][T15935] UDF-fs: Scanning with blocksize 2048 failed
[  860.438966][T15939] __nla_validate_parse: 1 callbacks suppressed
[  860.439120][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  860.471514][T15935] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  860.479527][T15935] UDF-fs: Scanning with blocksize 4096 failed
[  860.505594][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  860.515110][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.526937][T10920] usb 2-1: Product: syz
[  860.531253][T10920] usb 2-1: Manufacturer: syz
[  860.536870][T10920] usb 2-1: SerialNumber: syz
[  860.558940][T10920] usb 2-1: config 0 descriptor??
[  860.613963][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  860.882927][T10920] usb 2-1: USB disconnect, device number 118
18:52:35 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:35 executing program 0:
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

18:52:35 executing program 3:
syz_clone(0x1208a000, 0x0, 0x0, 0x0, 0x0, 0x0)

18:52:35 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000ff6b1000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0xc2, &(0x7f0000000080)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:35 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [], [], 'veth1_to_bridge\x00', 'wg0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@loopback, @loopback, [], [], 'veth0_virt_wifi\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300)

18:52:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

[  861.630110][T15956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:35 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)

18:52:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

18:52:35 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x8982, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

18:52:35 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x64, &(0x7f0000000000)=0x300, 0x4)

[  862.011080][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  862.021683][ T3568] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  862.024235][T15967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  862.040071][T15967] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
18:52:36 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x8982, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

18:52:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x14, r1, 0x211}, 0x14}}, 0x0)

[  862.262233][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  862.543082][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  862.552435][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.560576][ T3568] usb 2-1: Product: syz
[  862.565025][ T3568] usb 2-1: Manufacturer: syz
[  862.569775][ T3568] usb 2-1: SerialNumber: syz
[  862.642920][ T3568] usb 2-1: config 0 descriptor??
[  862.684983][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  863.069646][ T3568] usb 2-1: USB disconnect, device number 119
18:52:37 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:37 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000003640), 0x0, 0x0)

18:52:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31}, 0x24}}, 0x0)

18:52:37 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x0, 0x0, 0x9}, 0x48)

18:52:37 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:37 executing program 2:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0)

[  863.782186][T15987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:37 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0xc80c1)

18:52:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect(r0, &(0x7f0000000080)=@generic={0x0, "fb04704bb72143e68e43f6e761145d38cb2dd8c83ae630f078e026ae640881edb5320c641b6e5ed294197a688505a424a6b47bd4cf4aa12e09675d057d65ef28e1a1e52460380995ae2708b16ddf51fee8fd4a35135248e98f0b02860318032b9558cfde5b50d8164406db6bc197292b54d7ae3238f9dd5d9f7da4c17fd2"}, 0x80)

18:52:37 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @local, 0x9}, 0x1c, 0x0}}], 0x1, 0x0)

18:52:37 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

[  863.889400][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  863.966607][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  864.182296][ T3568] usb 2-1: new high-speed USB device number 120 using dummy_hcd
18:52:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31}, 0x24}}, 0x0)

18:52:38 executing program 5:
socketpair(0x0, 0x0, 0x0, &(0x7f0000005280))

[  864.422384][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  864.624415][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  864.680216][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  864.731412][T16008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  864.732895][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  864.750031][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.758320][ T3568] usb 2-1: Product: syz
[  864.762714][ T3568] usb 2-1: Manufacturer: syz
[  864.767438][ T3568] usb 2-1: SerialNumber: syz
[  864.843909][ T3568] usb 2-1: config 0 descriptor??
[  864.885758][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  865.287221][T10920] usb 2-1: USB disconnect, device number 120
18:52:39 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:39 executing program 2:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x0, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

18:52:39 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

18:52:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)

18:52:39 executing program 5:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14}, 0xfffffdef}}, 0x0)

18:52:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@delchain={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff000000000b0001"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x11, 0xf31}, 0x24}}, 0x0)

18:52:40 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x4, 0x0, 0x3, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1ff, 0x2}, 0x48)

[  866.016260][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:40 executing program 0:
getpid()
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
request_key(&(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0xfffffffffffffffd)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)='cpuset\x00', r0)

18:52:40 executing program 2:
socket(0x0, 0x0, 0x0)
io_setup(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bridge0\x00', @ifru_map={0x5, 0x0, 0xe6b4}})

[  866.194990][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:52:40 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0xa7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000200))

[  866.246358][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  866.393456][T10920] usb 2-1: new high-speed USB device number 121 using dummy_hcd
18:52:40 executing program 5:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
io_setup(0x81, &(0x7f0000000100)=<r1=>0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r2, 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78)
fcntl$setstatus(r0, 0x4, 0x6800)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])
socket$inet_udplite(0x2, 0x2, 0x88)
mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0)

18:52:40 executing program 0:
syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000000c0)={[{@attr2}]})

[  866.642635][T10920] usb 2-1: Using ep0 maxpacket: 32
[  866.933055][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  866.942527][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.950693][T10920] usb 2-1: Product: syz
[  866.955612][T10920] usb 2-1: Manufacturer: syz
[  866.960342][T10920] usb 2-1: SerialNumber: syz
[  867.019885][T16042] XFS: attr2 mount option is deprecated.
[  867.079421][T10920] usb 2-1: config 0 descriptor??
[  867.118937][T16042] XFS (loop0): Invalid superblock magic number
[  867.163008][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  867.553790][T10920] usb 2-1: USB disconnect, device number 121
18:52:42 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:42 executing program 2:
add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "d20ec22c0c537d84c2fe97db7b170122b23e4cec374d6b852c74f07c485bbbe0f1e625dd6ea537d3580ae600d721b6662fe644d422e721b252fccbac3c545527"}, 0x48, 0xfffffffffffffffe)
r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "d20ec22c0c537d84c2fe97db7b170122b23e4cec374d6b852c74f07c485bbbe0f1e625dd6ea537d3580ae600d721b6662fe644d422e721b252fccbac3c545527"}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)

18:52:42 executing program 3:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40)

18:52:42 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local, @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "253698", 0x0, 0x87, 0x0, @private1, @private0}}}}, 0x0)

18:52:42 executing program 5:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
io_setup(0x81, &(0x7f0000000100)=<r1=>0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r2, 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78)
fcntl$setstatus(r0, 0x4, 0x6800)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])
socket$inet_udplite(0x2, 0x2, 0x88)
mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0)

18:52:42 executing program 0:
syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000000c0)={[{@attr2}]})

[  868.264939][T16058] XFS: attr2 mount option is deprecated.
18:52:42 executing program 4:
openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x24081, 0x0)

18:52:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0x8140aecc, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

18:52:42 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044000)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="11", 0x1}], 0x1}, 0x0)

[  868.428266][T16058] XFS (loop0): Invalid superblock magic number
18:52:42 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000011c0)={@multicast2, @multicast2}, 0xc)

18:52:42 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x8600, &(0x7f0000000c00)=@raw=[@alu], &(0x7f0000000c40)='syzkaller\x00', 0x5, 0x9e, &(0x7f0000000c80)=""/158, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  868.673385][ T3568] usb 2-1: new high-speed USB device number 122 using dummy_hcd
18:52:42 executing program 0:
syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000000c0)={[{@attr2}]})

[  868.912233][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  869.148319][T16081] XFS: attr2 mount option is deprecated.
[  869.233187][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  869.242564][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.250734][ T3568] usb 2-1: Product: syz
[  869.255182][ T3568] usb 2-1: Manufacturer: syz
[  869.259915][ T3568] usb 2-1: SerialNumber: syz
[  869.287820][T16081] XFS (loop0): Invalid superblock magic number
[  869.308268][ T3568] usb 2-1: config 0 descriptor??
[  869.355064][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  869.792269][T10920] usb 2-1: USB disconnect, device number 122
18:52:44 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0x8140aecc, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

18:52:44 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044000)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="11", 0x1}], 0x1}, 0x0)

18:52:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="66b9ac0200000f32baa100b0f9ee2e0f20d5670f0139662efb3e0fc7ab76a20f01fb2ed0e92e3e3665660f38811466b9800000c00f326635000400000f30", 0x3e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x39)

18:52:44 executing program 0:
syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000000c0)={[{@attr2}]})

[  870.489736][T16097] XFS: attr2 mount option is deprecated.
18:52:44 executing program 3:
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$cgroup(r0, 0x0, 0x200002, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
syz_clone(0x42000000, 0x0, 0x0, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)='o')

18:52:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)={[{@utf8}, {@uni_xlate}], [{@obj_role}, {@smackfsdef}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200)

18:52:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0x8140aecc, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

18:52:44 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
poll(&(0x7f00000006c0)=[{r0}], 0x1, 0x0)

[  870.779541][T16097] XFS (loop0): Invalid superblock magic number
18:52:45 executing program 4:
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

[  871.055924][T10920] usb 2-1: new high-speed USB device number 123 using dummy_hcd
18:52:45 executing program 0:
openat$cuse(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0)

[  871.303669][T10920] usb 2-1: Using ep0 maxpacket: 32
[  871.612707][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  871.622073][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.630260][T10920] usb 2-1: Product: syz
[  871.634725][T10920] usb 2-1: Manufacturer: syz
[  871.639438][T10920] usb 2-1: SerialNumber: syz
[  871.739766][T10920] usb 2-1: config 0 descriptor??
[  871.793261][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  872.222772][T10920] usb 2-1: USB disconnect, device number 123
18:52:46 executing program 4:
syz_mount_image$vfat(&(0x7f00000022c0), &(0x7f0000002300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580))

18:52:46 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x7, 0x0, 0x0)

18:52:46 executing program 2:
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0xcfb)

18:52:46 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:52:46 executing program 0:
sendmsg$qrtr(0xffffffffffffffff, 0x0, 0x0)

18:52:46 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@l2={0xa, 0x0, @fixed}, 0x80, &(0x7f0000002740)=[{&(0x7f0000000680)="ca", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="da", 0x1}], 0x1, 0x0, 0x60000000}}], 0x2, 0x840c1)

18:52:47 executing program 2:
r0 = socket(0x2, 0x3, 0x4)
ioctl$sock_inet_SIOCADDRT(r0, 0x541b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}})

18:52:47 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@local, @empty, 0x0, 0x5}, 0x10)

18:52:47 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0)

18:52:47 executing program 4:
syz_open_dev$sndctrl(&(0x7f0000008480), 0x80800000000000, 0x81)

18:52:47 executing program 3:
socket(0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

[  873.372750][T10920] usb 2-1: new high-speed USB device number 124 using dummy_hcd
18:52:47 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x0, 0x0, 0x0, 0xa40}, 0x48)

18:52:47 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x6, 0x0, 0x1000}, 0x48)

18:52:47 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000000)=@framed={{}, [@cb_func, @cb_func]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  873.612111][T10920] usb 2-1: Using ep0 maxpacket: 32
[  873.892899][T10920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  873.902284][T10920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.910434][T10920] usb 2-1: Product: syz
[  873.914887][T10920] usb 2-1: Manufacturer: syz
[  873.919619][T10920] usb 2-1: SerialNumber: syz
[  874.084382][T10920] usb 2-1: config 0 descriptor??
[  874.125018][T10920] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  874.630926][ T3568] usb 2-1: USB disconnect, device number 124
18:52:49 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:52:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, {0x2, 0x4e21, @loopback}, 0x22c, 0x0, 0x0, 0x0, 0xf801, &(0x7f0000000000)='nr0\x00', 0x9, 0x8000000000000001, 0x39})
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x9, 0xfea9, 0x3, 0x10000000000007fb, 0x401], 0x1, &(0x7f00000000c0), 0x0, [{}]}, 0x88)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:52:49 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x610ca83634bc79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:49 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x9c)

18:52:49 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)

18:52:49 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8)

18:52:49 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000800)=""/4096, 0x26, 0x1000, 0x1}, 0x20)

18:52:49 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:49 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
sendmmsg$inet_sctp(r0, &(0x7f0000005680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)='<', 0x1}], 0x1}], 0x1, 0x0)

18:52:49 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='macsec0\x00'})

18:52:49 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7}, {0xb}, {}]}]}}, &(0x7f0000000300)=""/244, 0x3e, 0xf4, 0x1}, 0x20)

18:52:49 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
sendmmsg$sock(r0, &(0x7f00000048c0)=[{{&(0x7f00000005c0)=@l2={0x2, 0x0, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000640)="c4", 0x4d0}], 0x1}}], 0x1, 0x0)

[  875.803616][ T3568] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  876.063014][ T3568] usb 2-1: Using ep0 maxpacket: 32
[  876.382594][ T3568] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  876.392727][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.400879][ T3568] usb 2-1: Product: syz
[  876.405586][ T3568] usb 2-1: Manufacturer: syz
[  876.410696][ T3568] usb 2-1: SerialNumber: syz
[  876.421498][ T3568] usb 2-1: config 0 descriptor??
[  876.468712][ T3568] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  876.695846][ T3568] usb 2-1: USB disconnect, device number 125
18:52:51 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:52:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1000000000000009, &(0x7f00000000c0)}, 0x88)

18:52:51 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r0, 0x0, 0xfffffecd, 0x20004010, 0x0, 0xfffffffffffffd14)

18:52:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x0)

18:52:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x88, 0x41, &(0x7f00000000c0)=ANY=[], 0x58)

18:52:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:52:51 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, 0x0, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
socket$netlink(0x10, 0x3, 0x0)

18:52:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10)

18:52:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r0, 0x541b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}})

18:52:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r0, 0x5411, 0x0)

[  877.731277][T16207] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
18:52:51 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2404c081, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4)

18:52:51 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, 0x0, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
socket$netlink(0x10, 0x3, 0x0)

[  877.863171][T10334] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  878.102391][T10334] usb 2-1: Using ep0 maxpacket: 32
[  878.151437][T16216] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  878.402856][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  878.413024][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.421191][T10334] usb 2-1: Product: syz
[  878.425586][T10334] usb 2-1: Manufacturer: syz
[  878.430301][T10334] usb 2-1: SerialNumber: syz
[  878.450925][T10334] usb 2-1: config 0 descriptor??
[  878.505415][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  878.742530][T10920] usb 2-1: USB disconnect, device number 126
18:52:53 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0xf8, 0xcd, 0x20, 0x4e6, 0x5, 0x10f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xb1, 0x8f}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe(&(0x7f0000000100))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:52:53 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockname(r0, 0x0, &(0x7f0000000300)=0xfc)

18:52:53 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, 0x0, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
socket$netlink(0x10, 0x3, 0x0)

18:52:53 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x541b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}})

18:52:53 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2404c081, 0x0, 0x0)

18:52:53 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  879.438864][T16230] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
18:52:53 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7c, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10)

18:52:53 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000005680)=[{&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000400)='<', 0x1}], 0x1}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x6835, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4)

18:52:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696e746572000000000000000008000000000000000000000000000000000003"], 0x58)

18:52:53 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000900)="e4", 0x1}], 0x1, &(0x7f0000000a40)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x8}}], 0x30}, 0x0)

18:52:53 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, 0x0, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
socket$netlink(0x10, 0x3, 0x0)

18:52:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r0, 0x5452, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}})

[  879.932656][T10334] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  879.961060][T16245] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  880.172163][T10334] usb 2-1: Using ep0 maxpacket: 32
[  880.492453][T10334] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f
[  880.501920][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.510080][T10334] usb 2-1: Product: syz
[  880.514590][T10334] usb 2-1: Manufacturer: syz
[  880.519328][T10334] usb 2-1: SerialNumber: syz
[  880.533657][T10334] usb 2-1: config 0 descriptor??
[  880.575174][T10334] ums-sddr09 2-1:0.0: USB Mass Storage device detected
[  880.807962][T10334] usb 2-1: USB disconnect, device number 127
18:52:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0)

18:52:55 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

18:52:55 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x0, 0x0, 0x0, 0xb00, 0x1}, 0x48)

18:52:55 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1}, {0x6, 0x0, 0x0, 0xffffffff}]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:52:55 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:52:55 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x1a, 0x0, 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe})

[  881.481431][   T24] audit: type=1326 audit(1648839175.531:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16252 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6f03549 code=0xffff0000
[  881.547027][T16259] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
18:52:55 executing program 4:
syz_clone(0x0, 0x0, 0x1a, 0x0, 0x0, 0x0)

18:52:55 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:55 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000140)=0x6e6, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x3, 0x400, @empty}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000500)={{0x2, 0x0, @private}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @broadcast}, 'bond_slave_0\x00'})
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x6, @private=0xa010101, 0x4e22, 0x0, 'lblc\x00', 0x56bb815476f2c947, 0x9, 0x1b}, 0x2c)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000500)={{0x2, 0x0, @private}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @broadcast}, 'bond_slave_0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0))
r4 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80000)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100)=0x1, 0x4)

18:52:55 executing program 0:
socketpair(0x2, 0x1, 0x100, &(0x7f0000000100))

18:52:56 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x2, 0x0, 0x0, [{}]}]}}, &(0x7f00000001c0)=""/207, 0x32, 0xcf, 0x1}, 0x20)

18:52:56 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000006c0)=""/4096, 0x28, 0x1000, 0x1}, 0x20)

18:52:56 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{}, [@map_val]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xe8, &(0x7f00000000c0)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:56 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003300)={&(0x7f00000032c0)='kyber_latency\x00'}, 0x10)

18:52:56 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x3, 0xe8, &(0x7f00000000c0)=""/232, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:56 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000300)=""/173, 0x2e, 0xad, 0x1}, 0x20)

18:52:56 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000080)={'full'}, 0xb)

18:52:56 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:56 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/207, 0x1a, 0xcf, 0x1}, 0x20)

18:52:56 executing program 0:
socketpair(0x2, 0x803, 0x4, &(0x7f0000000440))

18:52:56 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x3, 0xe8, &(0x7f00000000c0)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:57 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000600)=""/246, 0x1a, 0xf6, 0x1}, 0x20)

18:52:57 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000080)={'full'}, 0xb)

18:52:57 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xe8, &(0x7f00000000c0)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:52:57 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f00000001c0)=""/207, 0x1a, 0xcf, 0x1}, 0x20)

18:52:57 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x10}}, &(0x7f00000001c0)=""/207, 0x1a, 0xcf, 0x1}, 0x20)

18:52:57 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, 0x0, 0x0)

18:52:57 executing program 1:
socketpair(0x3a, 0x0, 0x0, &(0x7f0000001640))

18:52:57 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000080)={'full'}, 0xb)

18:52:57 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000002c0)={0x2}, 0xb)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000280)=0xb)

18:52:57 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10)

18:52:57 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x3f, 0x8}, 0xb)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000280)=0xb)

18:52:57 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040)={0x0, 0xfff}, 0x8)

[  883.619673][ T1195] ieee802154 phy0 wpan0: encryption failed: -22
[  883.626371][ T1195] ieee802154 phy1 wpan1: encryption failed: -22
18:52:57 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0xb)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000280)=0xb)

18:52:57 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000080)={'full'}, 0xb)

18:52:58 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x26, &(0x7f0000000180), &(0x7f00000001c0)=0x8)

18:52:58 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000000)={0x3, [0x1, 0x3, 0x0]}, 0xa)

18:52:58 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000240)={0x1, [<r2=>0x0]}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, 0x10)

18:52:58 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040)={0x4}, 0x8)

18:52:58 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)={0x1, [<r1=>0x0]}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r1}, 0x10)

18:52:58 executing program 5:
unlink(&(0x7f0000000b00)='./file0\x00')

18:52:58 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10)
listen(r0, 0xe9)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000080)={0xfffffffffffffeb0, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='#'], 0x8)

18:52:58 executing program 0:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000040)="dad3e9e016603056", 0x8, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x1}, 0x1c)

18:52:58 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect(r0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r2, &(0x7f00000001c0)={0x1c, 0x1c, 0x1}, 0x1c)
r3 = dup2(r2, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000700)={0x1, [<r4=>0x0]}, &(0x7f0000001700)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000140)={r4, 0x0, 0x1, 'p'}, 0x9)

18:52:58 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x0, 0x1, "e7"}, 0x9)

18:52:58 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x1203, &(0x7f0000000080), &(0x7f0000000000)=0x8)

18:52:58 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x98)

18:52:59 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0x0, 0x1c, 0x3}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff65}, 0x0)

18:52:59 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x8c)

18:52:59 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000240), 0xc)

18:52:59 executing program 4:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)

18:52:59 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')

18:52:59 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040)={0x0, 0xfff, 0x0, 0x3}, 0x8)

18:52:59 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10)
listen(r0, 0xe9)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000080)={0xfffffffffffffeb0, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f00000000c0), 0x8)

18:52:59 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0xfffffeaf, 0x0, &(0x7f00000000c0)={0xffffffffffffff7d, 0x2}, 0x10)

18:52:59 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@prinfo={0x14, 0x84, 0x7, {0x1}}], 0x14}, 0x0)

18:52:59 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='W', 0x1}], 0x1, &(0x7f0000000780)=[@prinfo={0x14}], 0x14}, 0x0)

18:52:59 executing program 5:
r0 = socket(0x1c, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c)
sendto(r0, 0x0, 0x0, 0x182, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c)

18:52:59 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x1c, 0x1c, 0x2}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c)

18:53:00 executing program 1:
open$dir(&(0x7f0000000200)='./file0\x00', 0x101a80, 0x0)

18:53:00 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000000)=0x88)

18:53:00 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000000)={0x2, [0x1, 0x1]}, 0x8)

18:53:00 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r1, &(0x7f0000000300)={0x1c, 0x1c, 0x1}, 0x1c)
r2 = dup2(r1, r0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000700), &(0x7f0000000400)=0x4)

18:53:00 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000240), &(0x7f0000000280)=0x4)

18:53:00 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000002c0), 0xb)

18:53:00 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in={0x0, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0x60}, 0x0)

18:53:00 executing program 4:
syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @remote, @val, {@ipv4}}, 0x0)

18:53:00 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fchdir(r0)

18:53:00 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0)

18:53:00 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0)

18:53:00 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
flock(r0, 0x0)

18:53:01 executing program 4:
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff}})

18:53:01 executing program 0:
setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x8800000000000001}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x38)

18:53:01 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000080)={0xffffffffffffffc1}, 0x10)

18:53:01 executing program 5:
syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @empty, @val, {@ipv4}}, 0x0)

18:53:01 executing program 1:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x0)

18:53:01 executing program 3:
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x6)

18:53:01 executing program 4:
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)

18:53:01 executing program 0:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in={0x2, 0x3}, 0xc)

18:53:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0)

18:53:01 executing program 1:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
r1 = getpgrp(0x0)
fcntl$setown(r0, 0x6, r1)
fcntl$setown(r0, 0x6, r1)

18:53:01 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000d46000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x0)

18:53:01 executing program 5:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:53:02 executing program 4:
setitimer(0x0, &(0x7f0000000100)={{0x200000000000000}}, 0x0)

18:53:02 executing program 0:
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1013, 0xffffffffffffffff, 0x0)

18:53:02 executing program 2:
msync(&(0x7f0000000000/0x1000)=nil, 0x20000000, 0x6)

18:53:02 executing program 3:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
r1 = getpgrp(0x0)
fcntl$setown(r0, 0x6, r1)
fcntl$setown(r0, 0x6, 0x0)

18:53:02 executing program 1:
pipe2(&(0x7f0000000000), 0x0)
clock_gettime(0x4, &(0x7f0000000100))

18:53:02 executing program 0:
setrlimit(0x0, &(0x7f0000000040)={0x8000})

18:53:02 executing program 5:
readv(0xffffffffffffffff, &(0x7f0000000300), 0x1000000000000020)

18:53:02 executing program 4:
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, &(0x7f0000000340))
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

18:53:02 executing program 3:
r0 = socket(0x11, 0x3, 0x0)
setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8)

18:53:02 executing program 1:
syz_emit_ethernet(0xe, &(0x7f00000000c0)={@random="a536e9c9608d", @random="79e65d7c5b77", @val, {@ipv6}}, 0x0)

18:53:02 executing program 5:
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)

18:53:02 executing program 2:
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, &(0x7f0000000340))
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)

18:53:02 executing program 0:
syz_emit_ethernet(0x4f, &(0x7f0000000040)={@random="a536e9c9608d", @remote, @val, {@ipv4}}, 0x0)

18:53:02 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
sendto(r0, 0x0, 0xfffffffffffffdff, 0x0, &(0x7f0000000100)=@in6={0x18, 0x3}, 0xc)

18:53:03 executing program 3:
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv6}}, 0x0)

18:53:03 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

18:53:03 executing program 1:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0)

18:53:03 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r0, &(0x7f00000002c0), 0x100000000000010f)

18:53:03 executing program 0:
clock_gettime(0xd727f05497c0a19d, 0x0)

18:53:03 executing program 4:
r0 = socket$inet(0x2, 0x8002, 0x0)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x9)

18:53:03 executing program 3:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x4)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000002580)="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", 0xff2}, {&(0x7f0000001640)="a506adab4f1ef8371632e6001d5380c13ddd2ec1668655dc2b15140462c0af", 0x1f}, {&(0x7f0000001680)="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", 0xffffff98}, {&(0x7f0000000040)="c2d2155073e0ad3bff358376e78692c9a2b4d583a3fa94c90000312b945793d39874", 0x22}, {&(0x7f0000000080)="8a7633a7186142855750eca813a4193ceabd2e463064725f527a8672e5109cd1468927f7d4a56e30c61a4894b35ab1ce4b5428357070eac6cfd0ba4a2ead0df843737b181be80c6e080fce4b3aff8143e619213e06cbc544ab8f737452512b99430719a22a39efd464ab84b66276a94959825b96b33aa342cf5dce7ed492d2123f219dc4d667fd5d0ca82d95dda69196b503d6337945bb77789664e9cc9b548553472e14955866b5df2d40aca18790041dc4ea6e2379f4a9f3eff7e6d48c2d94fe0f805a9943001c716fb458771d7d268511074b6567c6ed66aaad5919d58e28c0d24ae2b4a2c018cb9fbf7c", 0xec}, {&(0x7f0000000180)="a6e273f3b5135a9f207e1c218a731ce58dd7de97573fea7408f6", 0x1a}], 0x6)

18:53:03 executing program 5:
open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x0)

18:53:03 executing program 1:
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)

18:53:03 executing program 2:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

18:53:03 executing program 0:
socket(0x1e, 0x0, 0x7f)

18:53:03 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="a018"], 0x1a0}, 0x0)

18:53:03 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000400)=@abs={0x8, 0x1}, 0x8, 0x0}, 0x0)

18:53:03 executing program 5:
socketpair(0x18, 0x0, 0x0, &(0x7f0000001440))

18:53:04 executing program 2:
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

18:53:04 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind(r0, &(0x7f0000000200), 0x80)

18:53:04 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x1}, 0x10)

18:53:04 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
mmap(&(0x7f0000da1000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)

18:53:04 executing program 4:
open$dir(&(0x7f0000001640)='./file0\x00', 0x200, 0x0)

18:53:04 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', 0x40)

18:53:04 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights], 0x10}, 0x2004c011)

18:53:04 executing program 3:
syz_usb_connect$cdc_ecm(0x0, 0x5d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x7, 0x3f}, [@acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x9, 0x29}, @mdlm_detail={0x5, 0x24, 0x13, 0x0, "c1"}]}}}]}}]}}, 0x0)

18:53:04 executing program 2:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740))

18:53:04 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000000000)="a12e2689", 0x4)

18:53:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
getsockname$unix(r0, &(0x7f0000000340), 0x0)

18:53:05 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0xa, 0x0}, 0x101)

18:53:05 executing program 1:
r0 = socket(0x18, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0, 0x0, &(0x7f0000000140)=[{0x10}, {0x10}], 0x20}, 0x0)

18:53:05 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f0000000000)="a12e2689", 0x4)

[  891.092188][T10920] usb 4-1: new high-speed USB device number 12 using dummy_hcd
18:53:05 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0)
preadv(r2, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0)
r3 = dup2(r0, r1)
recvmmsg(r3, &(0x7f0000000680), 0x10, 0x0, 0x0)

18:53:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_opts(r0, 0x0, 0x7, 0x0, 0x0)

18:53:05 executing program 1:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xa, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0)

[  891.452819][T10920] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
18:53:05 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xc, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000ff00000000000000050000008520"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x9c, &(0x7f0000000200)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  891.623448][T10920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  891.632933][T10920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.641088][T10920] usb 4-1: Product: syz
[  891.645566][T10920] usb 4-1: Manufacturer: syz
[  891.650323][T10920] usb 4-1: SerialNumber: syz
[  891.845461][T10920] cdc_ether: probe of 4-1:1.0 failed with error -22
18:53:06 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5450, 0x0)

[  892.090718][ T3568] usb 4-1: USB disconnect, device number 12
18:53:06 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x0, 0x0, 0x9, 0x11, 0x1}, 0x48)

18:53:06 executing program 1:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x453, 0x4}, 0x10}}, 0x0)

18:53:06 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000c40)='syzkaller\x00', 0x5, 0x9e, &(0x7f0000000c80)=""/158, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc01047d0, 0x0)

18:53:06 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80)

18:53:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}}, 0x0)

18:53:06 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000780), 0xc, &(0x7f0000000c80)={0x0}}, 0x0)

18:53:06 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f0000000400)={@local, @link_local={0x2f}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@private}, {@multicast1}]}, @noop, @generic={0x0, 0x4, 'X6'}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@private}, {@dev}, {@multicast1}, {@local}]}]}}}}}}}, 0x0)

18:53:06 executing program 4:
r0 = socket(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600425be00140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)

18:53:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r1, 0x1}, 0x14}}, 0x0)

18:53:07 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f5, &(0x7f0000002900)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', r1, 0x29, 0xc1, 0xff, 0xee, 0x50, @remote, @mcast1, 0x80, 0x8, 0x1, 0x7}})
pipe(&(0x7f0000000e00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000e00)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, &(0x7f00000004c0), 0x7ff, 0x0)
pipe(&(0x7f0000000e00)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, &(0x7f00000004c0), 0x7ff, 0x0)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x10)
pipe(&(0x7f0000000e00)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, &(0x7f00000004c0), 0x7ff, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000640)="fa440bcaddd0ce088d502ce05a9b48319d7213b1a18dc59e0b111376d247a1c3267f7ef34880fbec2bf02630a7c6de7e6306bd3593b5e65eb1af10a23a432a502c4f732af8ff32b4ca2810c847558d8d8e5f9fd2b0bc2f48380820a3d92c8cd16d462e3328d40410e4dbff25fc83b44ffa4552b33876c70b533bf0819bab5263915d5b121a54175485ad0d82859cb89c4e33ad9cc076374a5a9ab1d4ae8d5c4d3776fb4bd1e7aa69f4f18a10a208158a4f117c43e9e6e710e07a286ef10bedb624c39cf5bb07015ffcdddeffa5553966d5a18fbe794a355f8f4c8b8c6e4e9cdfde6e2c6c39efb95fcd17d43d", 0xec}, {&(0x7f0000000740)="afbc6e9a39189bc1dfa82cc024e158f416604cfdb4e3540ceb3d5dc5a8142ede02502d81158a4696595da6700294e1674404e64122126e8a40860196f5a934388fb0fcff7d52660b43e6a886f9181381d9d17422374b8810f9ef1e740e8454a7fb357b36ed07b4553f9fe8eb6fcd9f50d2f9cc9dd330e1e6fc31b30de337f88e81786728cd2943b4795bef56e2d276a7d61ac4768c1a3980da2156b9c5", 0x9d}], 0x16, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, &(0x7f0000000280), &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xa, 0x9, 0xffff00}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r6, r7, 0xffffffffffffffff, r4, r9]}, 0x80)
r10 = accept4$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000880)=0x1c, 0x80000)
splice(r10, 0x0, r4, &(0x7f00000004c0)=0x10001, 0x7ff, 0x0)
pipe(&(0x7f0000000840)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
splice(r11, 0x0, r12, &(0x7f00000004c0), 0x7ff, 0x0)
sendto$inet6(r11, &(0x7f0000000e40)="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", 0x1000, 0x4080, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10)
getsockname(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000001c0)=0x80)

18:53:07 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x10)
syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x1a}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@remove_addr={0x1e, 0x21, 0x0, 0x0, "a8df5c34c310d61bf0cc603efce4183a6cd397f6b8b6d92a5b4df5d5f355"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0)

18:53:07 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f5, &(0x7f0000002900)={'ip6_vti0\x00', &(0x7f0000002a00)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}})

18:53:07 executing program 4:
r0 = socket(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600425be00140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)

18:53:07 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$unix(r0, 0x0, 0x0, 0x2002, 0x0, 0x0)

18:53:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x3)

18:53:07 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)

18:53:07 executing program 0:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {0x13}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0)

18:53:07 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4)
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@remove_addr={0x1e, 0x21, 0x0, 0x0, "a8df5c35c310d61bf0cc603efce4183a6cd397f4b8b6d92a5b4df5d5f355"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0)

18:53:07 executing program 5:
r0 = socket(0x28, 0x5, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0)

18:53:07 executing program 4:
r0 = socket(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600425be00140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)

18:53:07 executing program 3:
r0 = socket(0x1, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'})
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

18:53:07 executing program 0:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4, 0x8}]}, 0x18}}, 0x0)

18:53:08 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4)
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@remove_addr={0x1e, 0x21, 0x0, 0x0, "a8df5c35c310d61bf0cc603efce4183a6cd397f4b8b6d92a5b4df5d5f355"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0)

18:53:08 executing program 5:
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0)

[  894.215974][T16602] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
18:53:08 executing program 4:
r0 = socket(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600425be00140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)

18:53:08 executing program 1:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0)

18:53:08 executing program 3:
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000380)={0xfffff089}, 0x8)

18:53:08 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001980)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007462660034000200280001000000000000000000200000ccc2006f778c00000000000000000000000097a1202503be273f93b26522c5cd8a2dd57da19a57576abbfdf3bd4828964d6972af2f"], 0x60}}, 0x0)
sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0)

18:53:08 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4)
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@remove_addr={0x1e, 0x21, 0x0, 0x0, "a8df5c35c310d61bf0cc603efce4183a6cd397f4b8b6d92a5b4df5d5f355"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0)

18:53:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="73d5621b861a5716ce37d84ce8eeeab5f478e96a7e19214416c9709af8a902a8596ebf8522ad1a5855", 0x29)

18:53:09 executing program 4:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)={0x14, r0, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0)

18:53:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0)

18:53:09 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4)
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@remove_addr={0x1e, 0x21, 0x0, 0x0, "a8df5c35c310d61bf0cc603efce4183a6cd397f4b8b6d92a5b4df5d5f355"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0)

18:53:09 executing program 1:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0)

18:53:09 executing program 5:
r0 = getpid()
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r1, 0x0, 0x0, 0x0}, 0x30)

[  895.200070][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
18:53:09 executing program 3:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@remote, @link_local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0208cc", 0x28, 0x3a, 0x0, @loopback, @empty, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @dev}}}}}}, 0x0)

18:53:09 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001100)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

18:53:09 executing program 1:
process_madvise(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)

18:53:09 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

18:53:09 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001980)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007462660034000200280001000000000000000000200000ccc2006f778c00000000000000000000000097a1202503be273f93b26522c5cd8a2dd57da19a57576abbfdf3bd4828964d6972af2f"], 0x60}}, 0x0)
sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0)

18:53:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, 0x0, 0x0)

18:53:10 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
io_setup(0x400, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

18:53:10 executing program 4:
syz_clone(0xce002580, 0x0, 0x0, 0x0, 0x0, 0x0)

18:53:10 executing program 1:
socket$inet(0x2, 0x0, 0x89b)

18:53:10 executing program 5:
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), 0x0, 0x0, 0x0)

18:53:10 executing program 2:
syz_80211_inject_frame(&(0x7f0000000680), 0x0, 0x0)

[  896.417527][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
18:53:10 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000006c0)={@my=0x1})

[  896.807311][T16658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:53:11 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9, &(0x7f0000000600)={[{@uid={'uid', 0x3d, 0xee01}}, {@huge_never}, {@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}]})

18:53:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]})

18:53:11 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)

[  897.381223][T16666] tmpfs: Bad value for 'mpol'
18:53:11 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)

[  897.469840][T16668] FAT-fs (loop5): bogus number of reserved sectors
[  897.476783][T16668] FAT-fs (loop5): Can't find a valid FAT filesystem
18:53:11 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001980)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007462660034000200280001000000000000000000200000ccc2006f778c00000000000000000000000097a1202503be273f93b26522c5cd8a2dd57da19a57576abbfdf3bd4828964d6972af2f"], 0x60}}, 0x0)
sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0)

18:53:11 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000001b40)=[{0x0, 0x0, 0xfffffffffffffffd}], 0x0, 0x0)

18:53:11 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x48)

18:53:12 executing program 4:
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

18:53:12 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1)

18:53:12 executing program 2:
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="e1", 0x1}], 0x1, 0x0)

18:53:12 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xa)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)

18:53:12 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001080)={@private0, 0x0, 0x0, 0x0, 0x4}, 0x20)

[  898.309155][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
18:53:12 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x410002, 0x0)

18:53:12 executing program 2:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840))

18:53:12 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000400)=""/239, 0x26, 0xef, 0x1}, 0x20)

[  898.544280][T16689] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
18:53:12 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xa)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)

18:53:13 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001980)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007462660034000200280001000000000000000000200000ccc2006f778c00000000000000000000000097a1202503be273f93b26522c5cd8a2dd57da19a57576abbfdf3bd4828964d6972af2f"], 0x60}}, 0x0)
sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0)

18:53:13 executing program 1:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)

18:53:13 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000005c0), 0x4)

18:53:13 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
syz_clone(0xce002580, 0x0, 0x0, 0x0, 0x0, 0x0)

18:53:13 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x8}]}}, &(0x7f0000000400)=""/239, 0x26, 0xef, 0x1}, 0x20)

18:53:13 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001b40)=[{0x0, 0x0, 0x8000}], 0x0, 0x0)

18:53:13 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xa)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)

18:53:13 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0)

18:53:13 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000001c00)={[{@utf8}]})

18:53:14 executing program 1:
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)

[  899.928998][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
18:53:14 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xa)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0)

18:53:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000dc40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)={0x14, r1, 0x105}, 0x14}}, 0x0)

18:53:14 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
syz_clone(0xce002580, 0x0, 0x0, 0x0, 0x0, 0x0)

18:53:14 executing program 2:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/141, 0x8d}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/79, 0x4f}, {0x0}], 0x2, 0x0)

18:53:14 executing program 1:
open$dir(&(0x7f0000000140)='./file0\x00', 0x103000, 0x0)

18:53:14 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001b40)=[{&(0x7f0000000600)='_', 0x1}], 0x0, 0x0)

18:53:15 executing program 1:
getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40))

18:53:15 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0x3}, 0xc)

18:53:15 executing program 5:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)}, 0x0)

18:53:15 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@prinfo={0x14, 0x84, 0x7, {0xf}}, @init={0x14}, @authinfo={0x10}, @prinfo={0x14}], 0x4c}, 0x0)

18:53:15 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f0000000040)=""/47, 0x2f)

18:53:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000dc40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0)

18:53:15 executing program 0:
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140))

18:53:15 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe}, 0x48)

18:53:15 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
syz_clone(0xce002580, 0x0, 0x0, 0x0, 0x0, 0x0)

18:53:15 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

18:53:15 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00')
r1 = getpgrp(0x0)
r2 = getpgrp(0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={r0})

18:53:15 executing program 3:
syz_open_dev$mouse(&(0x7f0000000700), 0x0, 0x234c82)

18:53:15 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getpeername(r0, 0x0, 0x0)

18:53:16 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000007c0))

18:53:16 executing program 1:
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044000)

18:53:16 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x10)

18:53:16 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
write$P9_RCREATE(r0, 0x0, 0x0)

18:53:16 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10)

18:53:16 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000004380), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00')
syz_open_dev$midi(&(0x7f0000000000), 0x200, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0))

18:53:16 executing program 0:
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)

18:53:17 executing program 4:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
syz_clone(0xce002580, 0x0, 0x0, 0x0, 0x0, 0x0)

18:53:17 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:17 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='ns\x00')
write$cgroup_subtree(r0, 0x0, 0x0)

18:53:17 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000080)='net/stat\x00')

18:53:17 executing program 0:
migrate_pages(0x0, 0x8001, 0x0, &(0x7f0000000140))

18:53:17 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000020c0)={0x0, 0x0})

18:53:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x80000001, 0x44002)
write$evdev(r0, &(0x7f0000000240)=[{{0x0, 0x2710}}], 0x20000258)

18:53:17 executing program 2:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x6542e3ff7704df6e)

18:53:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000000140)={'erspan0\x00', 0x0})

18:53:17 executing program 5:
setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00)

18:53:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000300))

18:53:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x0, 0x37b8, 0x2, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48)

18:53:18 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8903, &(0x7f0000000000)={'sit0\x00', 0x0})

18:53:18 executing program 5:
clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffeffffffff})

18:53:18 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000020c0)='ns/ipc\x00')
read$FUSE(r0, 0x0, 0x0)

18:53:18 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48)

18:53:18 executing program 0:
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x2905018, &(0x7f0000001500))

18:53:18 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000002c40)=@base={0x10, 0x0, 0x0, 0x3, 0x1aa, 0x1}, 0x48)

18:53:18 executing program 2:
syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nr_blocks=-p455m2p6e,e,size=23%1306,euid=', @ANYRESDEC])
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))

18:53:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_TARGET_NETNSID={0x8}]}, 0x34}}, 0x0)

18:53:18 executing program 3:
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

[  904.997935][T16827] tmpfs: Bad value for 'nr_blocks'
18:53:19 executing program 1:
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000000080)='X', 0x1}, {&(0x7f0000000140)='F', 0x1, 0x8000000000000001}, {&(0x7f0000000280)="f78a", 0x2, 0xffff}], 0x0, 0x0)

18:53:19 executing program 0:
r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7c836bf0, 0x0)
ioctl$UDMABUF_CREATE(r0, 0x5452, &(0x7f0000000540))

18:53:19 executing program 4:
socketpair(0x2, 0x3, 0x42, &(0x7f0000000100))

18:53:19 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x9, 0xd12, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48)

18:53:19 executing program 3:
r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x42802)
write$P9_RWRITE(r0, 0x0, 0x0)

18:53:19 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x48)

18:53:19 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0))

18:53:19 executing program 1:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x0, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000080000000a000100726f757465000000440002"], 0x74}}, 0x0)

18:53:19 executing program 3:
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='ns\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/4\x00')

18:53:19 executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a})
close(r1)

18:53:19 executing program 5:
syz_emit_ethernet(0xe, 0x0, 0x0)
syz_emit_ethernet(0x12, &(0x7f00000000c0)={@remote, @multicast, @val={@void}, {@generic={0x8864}}}, 0x0)

18:53:19 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x34000803, 0x0, 0x0)

18:53:20 executing program 4:
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = io_uring_setup(0xcb, &(0x7f00000001c0))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000340)=""/4080, 0xff0}], 0x2)

18:53:20 executing program 5:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000200), 0x8})

18:53:20 executing program 3:
pselect6(0x3, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8})

18:53:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev, {[@timestamp={0x44, 0x4}]}}}}})

18:53:20 executing program 1:
openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0)

18:53:20 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@dev, @remote, @loopback, 0x0, 0x0, 0xb9, 0x400, 0x2140, 0x70050})

18:53:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000100))

18:53:20 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x80104592, &(0x7f0000000040)=[0x21])

18:53:20 executing program 2:
getegid()
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000)

18:53:20 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0xb, 0x4, &(0x7f00000018c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000001900)='syzkaller\x00', 0x5, 0x99, &(0x7f0000001940)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:20 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000080))

18:53:21 executing program 0:
r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0xfc1, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000500)={0x0, 0x2, [{r0}, {}]})

18:53:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000140)={'erspan0\x00', 0x0})

18:53:21 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0xfffffffd])

18:53:21 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x19, 0x0, 0x0)

18:53:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f0000000040))

18:53:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@delneigh={0x1c, 0x1d, 0xbfd18088fe45b8e9}, 0x1c}}, 0x0)

18:53:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1600bd60, 0x0, &(0x7f0000000040))

18:53:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', 0x0})

18:53:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0xecd4bc07272db02a)

18:53:21 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1ff, 0x5, 0x9, 0x0, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

18:53:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}})

18:53:22 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)

18:53:22 executing program 5:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x804, &(0x7f0000000540)={[{@block}]})

18:53:22 executing program 0:
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0xe81}], 0x0, 0x0)

18:53:22 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40104593, &(0x7f0000000040)=[0x7])

18:53:22 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x11, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:22 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
chown(&(0x7f0000002140)='./file0\x00', 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

[  908.330442][T16908] loop0: detected capacity change from 0 to 7
18:53:22 executing program 1:
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x0, 0x70bd2d}, 0x10}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x31, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:22 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000020c0)={0x2, &(0x7f0000002080)=[{0x3}, {0x2, 0x0, 0x0, 0x800}]})

18:53:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000040)=0x1000000)

18:53:22 executing program 0:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)

18:53:22 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000200)='net/psched\x00')

18:53:23 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x400445a0, &(0x7f0000000040)=[0x700])

18:53:23 executing program 5:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

18:53:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8924, &(0x7f0000000140)={'erspan0\x00', 0x0})

18:53:23 executing program 0:
syz_open_procfs(0x0, &(0x7f0000002840)='net/arp\x00')

18:53:23 executing program 2:
openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x41, 0x0)

18:53:23 executing program 5:
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}})

18:53:23 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x0, 0x4}, 0x48)

18:53:23 executing program 1:
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1080, &(0x7f0000000540))

18:53:23 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x3, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

18:53:23 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x9, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:23 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0xff00, 0x0)

18:53:24 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x100000, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:24 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_type(r1, 0x0, 0x0)

18:53:24 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000001380)=""/158, 0x26, 0x9e, 0x1}, 0x20)

18:53:24 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x10)

18:53:24 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, &(0x7f00000002c0)=""/221, 0x2a, 0xdd, 0x1}, 0x20)

18:53:24 executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001780)=""/102400, 0x19000}], 0x1}, 0x0)

18:53:24 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'devices'}]}, 0x9)

18:53:24 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x8, 0x1, 0x2}, 0x7a)

18:53:24 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, 0x0)

18:53:24 executing program 2:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)='O', 0x1}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001780)=""/102400, 0x19000}], 0x1}, 0x0)

18:53:24 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x15, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:24 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000180)=""/221, 0x29, 0xdd, 0x1}, 0x20)

18:53:24 executing program 1:
mkdir(&(0x7f0000000580)='\x00', 0x0)

18:53:25 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x300, 0x0)

18:53:25 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff)
openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20)

18:53:25 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:25 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000001000000950000000004000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x2085, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:25 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d000000000100000000000003"], &(0x7f0000000300)=""/159, 0x2e, 0x9f, 0x1}, 0x20)

18:53:25 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0)
close(r1)

18:53:25 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f00000000c0)={'full', 0x20, 0xffffff7f00000000}, 0x2f)

18:53:25 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x83}, 0x48)

18:53:25 executing program 5:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)={&(0x7f0000000bc0)='./file0\x00'}, 0x10)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)

18:53:25 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001380)=""/158, 0x28, 0x9e, 0x1}, 0x20)

18:53:25 executing program 1:
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)

18:53:25 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7}, 0x48)

18:53:25 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0)

18:53:26 executing program 3:
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_RMID(r0, 0x0)

18:53:26 executing program 2:
request_key(&(0x7f0000000b40)='dns_resolver\x00', &(0x7f0000000b80)={'syz', 0x3}, &(0x7f0000000bc0)='trusted.overlay.redirect\x00', 0x0)

18:53:26 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x2})

18:53:26 executing program 0:
syz_extract_tcp_res(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@remote, @broadcast, @val, {@ipv6}}, 0x0)

18:53:26 executing program 4:
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000004380), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00')
syz_open_dev$midi(&(0x7f0000000000), 0x200, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

18:53:26 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x10000})

18:53:26 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x1600bd80, &(0x7f0000000000)={@empty, @remote}, 0x8)

18:53:26 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x9, 0x1, 0x1})

18:53:26 executing program 0:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000040), 0x8, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x1}, 0x59)

18:53:26 executing program 5:
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"], 0x34)
mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000)
sigaltstack(&(0x7f0000ffc000), 0x0)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

18:53:26 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x81, 0x1, 0x2})

18:53:26 executing program 1:
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

18:53:27 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140))

18:53:27 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080))

18:53:27 executing program 0:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740), 0x189801, 0x0)

18:53:27 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x3}, 0x14)

18:53:27 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:27 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0)

18:53:27 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x140, &(0x7f0000001c80))

18:53:27 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
getsockname(r0, 0x0, 0x0)

18:53:27 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000001140), 0x111042, 0x0)

18:53:27 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040))

18:53:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "ac2d771459e11135", "66043389ddd547f7b0662b1d813a8b48", "e754357b", "ac3e81d6fc701dd6"}, 0x28)

18:53:28 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:28 executing program 3:
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RMKDIR(r0, 0x0, 0x0)

18:53:28 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
renameat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

18:53:28 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt(r0, 0x6, 0x0, 0x0, 0x0)

18:53:28 executing program 1:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSTAT(r0, 0x0, 0x0)

18:53:28 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff)

18:53:28 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4, 0x0, 0x0)

18:53:28 executing program 5:
linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)

18:53:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect(r0, &(0x7f00000002c0)=@un=@abs, 0x80)

18:53:29 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80))

18:53:29 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:29 executing program 2:
openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)

18:53:29 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0)
write$char_usb(r0, 0x0, 0x0)

18:53:29 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, &(0x7f0000001c80))

18:53:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040))

18:53:29 executing program 2:
lchown(0x0, 0xffffffffffffffff, 0x0)

18:53:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000000c0), 0x4)

18:53:29 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:29 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)

18:53:29 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000003f40)={0x0, 0x3938700})

18:53:29 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000080))

18:53:30 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)

18:53:30 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, 0x0)

18:53:30 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

18:53:30 executing program 4:
syz_mount_image$sysv(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:30 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bond0\x00', 0x10)

18:53:30 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)

18:53:30 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000540), 0x8)

18:53:30 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000)

18:53:31 executing program 0:
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x8}, &(0x7f0000000180)={0x7}, 0x0, 0x0, 0x0)

18:53:31 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc040564a, &(0x7f0000000280)={0x3, 0x0, '\x00', @raw_data})

18:53:31 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00')
write$FUSE_ENTRY(r0, 0x0, 0x0)

18:53:31 executing program 4:
syz_mount_image$sysv(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:31 executing program 1:
futex_waitv(&(0x7f0000000b00)=[{0x0, &(0x7f0000000000), 0x82}, {0x0, &(0x7f0000000040), 0x2}], 0x2, 0x0, 0x0, 0x0)

18:53:31 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002020000082505a1a44000010203010902"], 0x0)

18:53:31 executing program 4:
syz_mount_image$sysv(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:31 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x7fffffff, 0x0, 0x1})

[  917.922298][T10920] usb 3-1: new high-speed USB device number 73 using dummy_hcd
18:53:32 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:32 executing program 5:
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc283, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa}, 0x0, 0x0, 0x6, [{0xca, &(0x7f0000000700)=ANY=[@ANYBLOB="ca03"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x812}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

18:53:32 executing program 3:
syz_io_uring_setup(0x21c5, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300))

[  918.162382][T10920] usb 3-1: Using ep0 maxpacket: 8
18:53:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0)

18:53:32 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)

[  918.282292][T10920] usb 3-1: config 0 has no interfaces?
[  918.442932][T10920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  918.452319][T10920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.460475][T10920] usb 3-1: Product: syz
[  918.464965][T10920] usb 3-1: Manufacturer: syz
[  918.469691][T10920] usb 3-1: SerialNumber: syz
[  918.603072][T10920] usb 3-1: config 0 descriptor??
18:53:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
write$proc_mixer(r0, 0xffffffffffffffff, 0x0)

18:53:32 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:32 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5646, 0x0)

[  918.762433][ T3559] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  918.846832][T10920] usb 3-1: USB disconnect, device number 73
18:53:32 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "eb"}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xc1, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x0, 0x81}}}}}}}]}}, 0x0)

[  919.002995][ T3559] usb 6-1: Using ep0 maxpacket: 8
[  919.140215][T17139] Sensor A: =================  START STATUS  =================
[  919.148262][T17139] Sensor A: Test Pattern: 75% Colorbar
[  919.154446][T17139] Sensor A: Show Information: All
[  919.159751][T17139] Sensor A: Vertical Flip: false
[  919.165098][T17139] Sensor A: Horizontal Flip: false
[  919.170470][T17139] Sensor A: Brightness: 128
[  919.175439][T17139] Sensor A: Contrast: 128
[  919.179942][T17139] Sensor A: Hue: 0
[  919.183972][T17139] Sensor A: Saturation: 128
[  919.188650][T17139] Sensor A: ==================  END STATUS  ==================
[  919.213274][ T3559] usb 6-1: unable to get BOS descriptor or descriptor too short
[  919.293149][ T3559] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  919.304458][ T3559] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
18:53:33 executing program 2:
syz_emit_ethernet(0xf2, &(0x7f0000000900)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x28, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@noop, @cipso={0x86, 0xf, 0x0, [{0x0, 0x2}, {0x0, 0x7, "8ef4fc020a"}]}, @cipso={0x86, 0x25, 0x0, [{0x0, 0xf, "36a90f846067809677b1e02641"}, {0x0, 0xb, "c1f86d16e7d04ff6ec"}, {0x0, 0x5, "1ae510"}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@remote}, {@empty}, {@private}, {}]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}}}}, 0x0)

18:53:33 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local, 0x1}, r1}}, 0x30)

18:53:33 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x8042, &(0x7f0000001780))

18:53:33 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x17, &(0x7f0000000040)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7}, @wireless={0xb, 0x10, 0x1, 0x0, 0x21, 0x0, 0xfa}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0xaa, &(0x7f0000000240)=@string={0xaa, 0x3, "102bb08a19e8d9411cd0bd1095d3562ca5b31648d37222359a0118f8291ae6e48413e57d53d5b4dfc6d37ed7408c82f683d48e31a52669571200bcb06275de7e94389c4373ba3158a823ba95da06bed2c5b7d12c8751d38b9df197063ded3891a38e06275c8f8f7b759b1fad8e3217837605f51ea54c4363ff509366b34458f0701079d6078371bb141daf8bca022297f879fd30dcb1f7565769ee88b32da0e700c78f6d23fbdcda"}}]})

[  919.563185][T10334] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  919.672652][ T3559] usb 6-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.40
[  919.682319][ T3559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.690469][ T3559] usb 6-1: Manufacturer: ࠒ
[  919.833380][T10334] usb 1-1: Using ep0 maxpacket: 8
[  919.962305][T10334] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  919.973998][T10334] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  919.984143][T10334] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  919.994151][T10334] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  920.103288][ T3559] usbhid 6-1:1.0: can't add hid device: -22
[  920.109722][ T3559] usbhid: probe of 6-1:1.0 failed with error -22
[  920.160179][ T3559] usb 6-1: USB disconnect, device number 14
[  920.202095][T12094] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  920.322823][T10334] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  920.332136][T10334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.340292][T10334] usb 1-1: Product: syz
[  920.344701][T10334] usb 1-1: Manufacturer: syz
[  920.349435][T10334] usb 1-1: SerialNumber: syz
[  920.442082][T12094] usb 2-1: Using ep0 maxpacket: 8
[  920.562453][T12094] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  920.573990][T12094] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  920.584192][T12094] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  920.594549][T12094] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  920.604649][T12094] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  920.614681][T12094] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
18:53:34 executing program 5:
timer_create(0x0, 0x0, &(0x7f0000000280))
timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0)

18:53:34 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1}}, 0x30)

18:53:34 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8042, &(0x7f0000001780))

18:53:34 executing program 2:
prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, &(0x7f0000000000))

[  920.653396][T10334] cdc_ncm 1-1:1.0: bind() failure
[  920.668738][T10334] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  920.675845][T10334] cdc_ncm 1-1:1.1: bind() failure
[  920.839129][T12094] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  920.848795][T12094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.857435][T12094] usb 2-1: Product: syz
[  920.861871][T12094] usb 2-1: Manufacturer: ⬐誰䇙퀜Ⴝ펕ⱖ뎥䠖狓㔢ƚᨩᎄ緥핓폆흾豀풃ㆎ⚥坩낼畢绞㢔䎜멳報⎨閺ۚ튾럅ⳑ冇诓ڗ鄸躣✆轜箏魵괟㊎茗նỵ䲥捃僿暓䒳ၰ홹茇뭱ᴔ讯ˊ霢秸ヽ뇜囷楗裮ⶳ윀涏ﬣ
18:53:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x1}, 0x14}}, 0x0)

18:53:35 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8042, &(0x7f0000001780))

[  920.885311][T10334] usb 1-1: USB disconnect, device number 4
[  920.887427][T12094] usb 2-1: SerialNumber: syz
18:53:35 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000000680)=""/72, 0x48}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000700)='bond_slave_0\x00', 0x10)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x58}}, 0x0)

18:53:35 executing program 0:
futex_waitv(&(0x7f0000000b00)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0)

18:53:35 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000580)=""/180)

[  921.192293][T12094] cdc_ncm 2-1:1.0: bind() failure
[  921.207637][T12094] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  921.214812][T12094] cdc_ncm 2-1:1.1: bind() failure
18:53:35 executing program 2:
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x24500)

18:53:35 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, r1}}, 0xfffffe5c)

[  921.361525][T12094] usb 2-1: USB disconnect, device number 2
18:53:35 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0x40049409, &(0x7f0000000140)={0x0, @pix_mp})

18:53:35 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8042, &(0x7f0000001780))

18:53:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0)

18:53:35 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @pix_mp})

18:53:35 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

18:53:35 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)

18:53:36 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001780))

18:53:36 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00')
read$FUSE(r0, &(0x7f0000003140)={0x2020}, 0x2020)

18:53:36 executing program 5:
r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x4020565b, &(0x7f0000000280)={0x0, 0x0, '\x00', @raw_data})

18:53:36 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1, @sliced})

18:53:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r1, 0x1}}, 0x18)

18:53:36 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00')
read$FUSE(r0, &(0x7f0000002c80)={0x2020}, 0x2020)

[  922.441170][T17189] VFS: unable to find oldfs superblock on device loop4
18:53:36 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x9, @pix_mp})

18:53:36 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc283, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

18:53:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7}}, 0x20}}, 0x0)

18:53:36 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001780))

18:53:36 executing program 1:
syz_emit_ethernet(0xb2, &(0x7f0000000900)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x18, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@noop, @cipso={0x86, 0xc, 0x0, [{0x0, 0x2}, {0x0, 0x4, "8ef4"}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@remote}, {@empty}, {@private}]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0)

18:53:36 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x13, 0xfa00, {0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1}}, 0x30)

18:53:37 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:37 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none}, 0xa)

[  923.136040][T17207] VFS: unable to find oldfs superblock on device loop4
18:53:37 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0)

[  923.182408][ T3568] usb 3-1: new high-speed USB device number 74 using dummy_hcd
18:53:37 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00')
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

18:53:37 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001780))

18:53:37 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

[  923.442284][ T3568] usb 3-1: Using ep0 maxpacket: 8
18:53:37 executing program 3:
syz_clone(0x86000000, 0x0, 0x0, 0x0, 0x0, 0x0)

[  923.572389][ T3568] usb 3-1: unable to get BOS descriptor or descriptor too short
[  923.632777][ T3568] usb 3-1: unable to read config index 0 descriptor/start: -71
[  923.640556][ T3568] usb 3-1: can't read configurations, error -71
[  923.741608][T17218] VFS: unable to find oldfs superblock on device loop4
18:53:38 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x80c0)

18:53:38 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc040564a, &(0x7f0000000280)={0x0, 0x0, '\x00', @raw_data})

18:53:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private1}, r1}}, 0x30)

18:53:38 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, 0x0)

18:53:38 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:38 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = io_uring_setup(0x27bc, &(0x7f0000000140)={0x0, 0x37ed})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0, 0xffffffffffffffff], 0x2)

18:53:38 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000540))

18:53:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000680)=""/210, 0x32, 0xd2, 0x1}, 0x20)

18:53:38 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, 0x0)

18:53:38 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:38 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x8, 0x4, 0x1050}, 0x48)

18:53:38 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f0000000040)=@raw=[@jmp], &(0x7f00000000c0)='GPL\x00', 0x7, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x2}]}, @fwd]}}, &(0x7f0000000400)=""/174, 0x3a, 0xae, 0x1}, 0x20)

18:53:38 executing program 5:
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:39 executing program 4:
syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x8042, 0x0)

18:53:39 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000002b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, &(0x7f0000002c40)=""/141, 0x32, 0x8d, 0x1}, 0x20)

18:53:39 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000018c0))

18:53:39 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0xc}, {0xa, 0x3}]}]}}, &(0x7f0000000300)=""/193, 0x3e, 0xc1, 0x1}, 0x20)

18:53:39 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5}]}]}}, &(0x7f0000000400)=""/174, 0x2e, 0xae, 0x1}, 0x20)

18:53:39 executing program 5:
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:39 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0)
mkdir(&(0x7f0000001980)='./file0\x00', 0x0)

18:53:39 executing program 3:
syz_clone(0x8b42700, 0x0, 0x0, 0x0, 0x0, 0x0)

18:53:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000dc40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x18}}, 0x0)

18:53:39 executing program 5:
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:39 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:39 executing program 4:
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x2}, 0x20)

18:53:40 executing program 4:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000080), 0x10)

18:53:40 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)

18:53:40 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:40 executing program 3:
r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x200, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045731, &(0x7f0000000080)={0x1})

18:53:40 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x5411, &(0x7f0000000080)={'batadv_slave_1\x00', @ifru_data=0x0})

18:53:40 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote, {[@cipso={0x86, 0x6}]}}}}}}, 0x0)

18:53:40 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000001a00)={&(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback, 0x1f}, 0x1c, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000019c0)=[@flowinfo={{0x14}}], 0x18}, 0xe014)

18:53:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0)

18:53:40 executing program 0:
bind$rds(0xffffffffffffffff, 0x0, 0x0)

18:53:40 executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x2e)

18:53:40 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000500))

18:53:40 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:41 executing program 4:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000001800), &(0x7f0000001840)="2969eedb11bec5d3cbc4a2f75cf7c057c591b9837f76ff160f2596b2f2e5d68d08f538b5ee3b316ef6a8e0ee30c674ffc83b60c808e63fd3b205909b8a803cf21f0fa05d820cbdac62f380fba79aeda6df")
keyctl$assume_authority(0x10, 0x0)
syz_open_dev$dri(&(0x7f0000001900), 0x438b, 0x401)

18:53:41 executing program 3:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000009c0))
getresuid(&(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00))

18:53:41 executing program 2:
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "d4f67f", 0x0, 0x67, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty}}}}, 0x0)

18:53:41 executing program 0:
syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x101081)

18:53:41 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:41 executing program 1:
r0 = socket(0x29, 0x5, 0x0)
sendto(r0, 0x0, 0x0, 0xd3c5691194cdaaba, 0x0, 0x0)

18:53:41 executing program 3:
syz_emit_ethernet(0x26, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@ra={0x94, 0x4}]}}}}}}, 0x0)

18:53:41 executing program 0:
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8300)

18:53:41 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000009540)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xe}]}}}], 0x38}}], 0x1, 0x0)

18:53:41 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:41 executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_targets\x00')
select(0x40, &(0x7f0000000400), 0x0, &(0x7f0000000480)={0x7fff}, &(0x7f00000004c0)={0x0, 0x2710})

18:53:41 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0xc0189436, &(0x7f0000000000)={'team_slave_1\x00', 0x978})

18:53:41 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001c40)=0x1f, 0x4)

18:53:41 executing program 3:
syz_emit_ethernet(0x26, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@ra={0x94, 0x4}]}}}}}}, 0x0)

18:53:42 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0)

18:53:42 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:42 executing program 4:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@dev, @remote, @void}, 0x0)

18:53:42 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x99, 0x9, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)

18:53:42 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1d}, 0x48)

18:53:42 executing program 3:
syz_emit_ethernet(0x26, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@ra={0x94, 0x4}]}}}}}}, 0x0)

18:53:42 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$assume_authority(0x10, 0x0)
syz_open_dev$dri(&(0x7f0000001900), 0x438b, 0x401)

18:53:42 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0)

18:53:42 executing program 1:
r0 = socket(0x2, 0x5, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0)

18:53:42 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:42 executing program 0:
r0 = socket(0x29, 0x5, 0x0)
sendmmsg$inet(r0, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

18:53:42 executing program 3:
syz_emit_ethernet(0x26, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@ra={0x94, 0x4}]}}}}}}, 0x0)

18:53:42 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101900, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0))
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x0, 0x0, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000)

18:53:43 executing program 4:
syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @remote}}}}}, 0x0)

18:53:43 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0)

18:53:43 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x86242, 0x0)

18:53:43 executing program 0:
select(0x40, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0)

18:53:43 executing program 3:
syz_emit_ethernet(0x0, 0x0, 0x0)

[  929.262791][T17359] dccp_invalid_packet: pskb_may_pull failed
18:53:43 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0)

18:53:43 executing program 1:
syz_emit_ethernet(0x26, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x4, 0x6f}]}}}}}}, 0x0)

18:53:43 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x7, 0xffff, 0x0, 0x1}, 0x48)

18:53:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)="71d285b992a326b868a8a05d0e38c952e76e4bf8d9003077fc28034cba60a932d7a03f55afba207204c3fa6081d3a9fa3739ed26e18d09d30b25a7723649c62546320882f837bd20a2ccdb3fe68bb30de4bf9812c29644a0688f30dfdcc7c78138f949fcf9bf92651fa1e3c6c6f4fa5d1f9e8c6bbbb8ee6cb64b4ef8a7984523aa9623559ba0cc55aa58a450d93756ffde7828cbd717e254f3f3a24280e91dc6c32c00842c446a62a98700688610330910664bcefab1c451575d718e4732278b250d665baa4961fdfbc49cc4d1541dac7e1692f40ed29c34", 0xd8)

18:53:43 executing program 3:
syz_emit_ethernet(0x0, 0x0, 0x0)

18:53:43 executing program 0:
r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5702, 0x0)

18:53:43 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0)

18:53:43 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x0, 0x3}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:43 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0)

18:53:44 executing program 3:
syz_emit_ethernet(0x0, 0x0, 0x0)

18:53:44 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)

18:53:44 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0)

18:53:44 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:44 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0))

18:53:44 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty}})

18:53:44 executing program 3:
syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}}}}, 0x0)

18:53:44 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, 0x0, 0x7800}})

18:53:44 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:44 executing program 1:
syz_mount_image$qnx6(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x1, &(0x7f0000001a00)=[{&(0x7f0000000940)="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", 0x122, 0xde}], 0x8404, &(0x7f0000001a80))

18:53:44 executing program 2:
mq_open(&(0x7f0000000100)='@-())\x00', 0x40, 0x0, &(0x7f0000000140)={0x0, 0x7fffffffffffffff, 0xcca})

18:53:45 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7}, 0x48)

18:53:45 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:45 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xffd2, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xfd2b}}, 0x0)

18:53:45 executing program 2:
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000600)={{0x2}})
syz_emit_ethernet(0x4e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb8100000086dd60"], 0x0)

18:53:45 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)

18:53:45 executing program 4:
pipe(&(0x7f0000001180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200), 0x10}, 0x80)

18:53:45 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf52bdbc94b4cff9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:45 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0)

[  931.413271][T17417] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
18:53:45 executing program 2:
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08060001080006040001"], 0x0)

18:53:45 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e0, 0x0)

18:53:45 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local, 0x6}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000380)="14", 0x1}, {&(0x7f0000000480)='i', 0x1}], 0x2, &(0x7f0000000880)=[@tclass={{0x14}}], 0x18}, 0x20008041)

18:53:45 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0xe01, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0)

18:53:45 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x6, &(0x7f0000000000)=@framed={{}, [@map_idx_val, @call]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x9f, &(0x7f00000003c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:45 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:46 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0xd91, 0x0, 0x9}, 0x48)

18:53:46 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8929, &(0x7f0000000000)={'team_slave_1\x00'})

18:53:46 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8941, 0x0)

18:53:46 executing program 1:
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @remote}, "a06b978806816822c9ad93cec2996f4b01e4f3b3042c1185"}}}}, 0x0)

18:53:46 executing program 3:
socketpair(0x10, 0x3, 0x1d, &(0x7f0000000040))

18:53:46 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0)

18:53:46 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2800200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0)

18:53:46 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x12, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:46 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8914, &(0x7f0000000000)={'team_slave_1\x00'})

[  932.478621][T17448] dccp_v4_rcv: dropped packet with invalid checksum
18:53:46 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0)

18:53:46 executing program 5:
r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='J', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, r0}, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={'nhpoly1305-avx2\x00'}})

18:53:46 executing program 2:
io_setup(0x9, &(0x7f0000000000)=<r0=>0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_submit(r0, 0x1, &(0x7f00000010c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

18:53:46 executing program 3:
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffa)

18:53:47 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0xca1}, 0x1c, 0x0}, 0x0)

18:53:47 executing program 1:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x24400, 0x0)

18:53:47 executing program 4:
r0 = socket$inet(0x2, 0xa, 0x0)
sendmsg(r0, &(0x7f00000003c0)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0)

18:53:47 executing program 3:
syz_emit_ethernet(0x1e, &(0x7f0000000000)={@dev, @remote, @void, {@generic={0x88ca, "d5df67991e8e2e1c158fa3c82c86c890"}}}, 0x0)

18:53:47 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000080)={'batadv_slave_1\x00', @ifru_data=0x0})

18:53:47 executing program 0:
r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305710, 0x0)

18:53:47 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)

18:53:47 executing program 2:
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7fff)

18:53:47 executing program 3:
r0 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080))

[  933.777384][T17463] could not allocate digest TFM handle nhpoly1305-avx2
18:53:48 executing program 5:
io_setup(0x9, &(0x7f0000000000)=<r0=>0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_submit(r0, 0x1, &(0x7f00000010c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

18:53:48 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8971, &(0x7f0000000000)={'team_slave_1\x00'})

18:53:48 executing program 0:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0813be", 0x8, 0x3a, 0x0, @remote, @private1, {[], @echo_reply}}}}}, 0x0)

18:53:48 executing program 1:
r0 = socket(0x29, 0x5, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40c4)

18:53:48 executing program 2:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)

18:53:48 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r0)

18:53:48 executing program 0:
syz_emit_ethernet(0x66, &(0x7f0000001e80)={@multicast, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0)

18:53:48 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x15, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:48 executing program 5:
syz_emit_ethernet(0x26, &(0x7f0000000100)={@dev, @link_local, @void, {@mpls_uc={0x4305, {[], @generic="8a768ab295c630c24643a748fb7d6b75f922ba6a5b4b956e"}}}}, 0x0)

18:53:48 executing program 1:
r0 = socket(0x2a, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})

18:53:48 executing program 2:
r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080))

18:53:48 executing program 3:
syz_emit_ethernet(0x12, &(0x7f00000000c0)={@local, @broadcast, @val={@void, {0x806}}}, 0x0)

18:53:48 executing program 4:
r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x305040)
fcntl$setown(r0, 0x8, 0x0)

18:53:48 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x19, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:48 executing program 5:
r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000180)={0x1})

18:53:48 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0xffffffff, 0x6, 0x4}, 0x48)

18:53:48 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10}, 0x48)

18:53:49 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:49 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e1, &(0x7f0000000080)={'batadv_slave_1\x00'})

18:53:49 executing program 0:
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]})

18:53:49 executing program 2:
getresgid(&(0x7f0000002f80), &(0x7f0000002fc0), &(0x7f0000003000))

18:53:49 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400))

18:53:49 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0/file0\x00'}, 0x6e)

[  935.482588][   T24] audit: type=1326 audit(1648839229.546:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17522 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6e8d549 code=0x0
18:53:49 executing program 4:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)

18:53:49 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', 0x0})
pipe2$watch_queue(&(0x7f00000003c0), 0x80)

18:53:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[], 0x0, 0x28416})

18:53:49 executing program 2:
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0)

18:53:49 executing program 1:
socketpair(0x2c, 0x0, 0x0, &(0x7f00000001c0))

18:53:49 executing program 5:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x6ce40, 0x0)

18:53:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r1, 0x721}, 0x14}}, 0x0)

18:53:50 executing program 2:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000003c40), &(0x7f0000003cc0)={&(0x7f0000003c80), 0x8})

18:53:50 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$link(0x1d, r0, 0x0)

18:53:50 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x100010, r0, 0x10000000)

18:53:50 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20)

18:53:50 executing program 1:
r0 = socket$inet6(0x2, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8913, &(0x7f0000000000)={'wg2\x00'})

18:53:50 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120)

18:53:50 executing program 2:
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xba2, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000180)={0x77359400}, 0x0)

18:53:50 executing program 3:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000002780))

18:53:50 executing program 5:
syz_mount_image$ufs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002c40)=[{&(0x7f0000002bc0)="cf", 0x1}], 0x0, 0x0)

18:53:50 executing program 0:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000300), 0x0)

18:53:51 executing program 4:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)

18:53:51 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)

18:53:51 executing program 5:
r0 = socket$inet6(0x2, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x80108906, 0x0)

18:53:51 executing program 1:
r0 = socket$inet6(0x2, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5460, 0x0)

18:53:51 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:51 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000001ac0)=0x15, 0x4)

[  937.397413][T17577] ucma_write: process 2213 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed.
[  937.513539][T17582] exfat: Bad value for 'dmask'
18:53:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)

18:53:51 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
pselect6(0x40, &(0x7f0000003b80), &(0x7f0000003bc0)={0xc3}, 0x0, 0x0, 0x0)

18:53:51 executing program 2:
prctl$PR_PAC_RESET_KEYS(0x22, 0x0)

18:53:51 executing program 5:
syz_mount_image$ufs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40), 0x0, 0x0)

18:53:51 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r0, 0x0, 0x0, 0x40011, 0x0, 0x0)

18:53:51 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:52 executing program 1:
socketpair(0x3, 0x0, 0x10000, &(0x7f0000000340))

[  938.098333][T17595] exfat: Bad value for 'dmask'
18:53:52 executing program 4:
syz_io_uring_setup(0x2666, &(0x7f0000000000)={0x0, 0xec41, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

18:53:52 executing program 2:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x14, 0x0, 0x0)

18:53:52 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:52 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:52 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000))
getrusage(0x1, &(0x7f0000000380))

18:53:52 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r0, 0x0, 0x0, 0x24000000, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20)

18:53:52 executing program 3:
mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0)

18:53:52 executing program 2:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000340)={0x0, 0x1, "be"})

[  938.756061][T17606] exfat: Bad value for 'dmask'
18:53:52 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:52 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:53 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)

18:53:53 executing program 4:
r0 = semget(0x0, 0x0, 0x0)
semctl$GETPID(r0, 0x0, 0xb, 0x0)

18:53:53 executing program 2:
syz_clone(0x2001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="c7")

18:53:53 executing program 3:
prctl$PR_PAC_RESET_KEYS(0x1d, 0x0)

[  939.278183][T17619] exfat: Bad value for 'dmask'
18:53:53 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:53 executing program 0:
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:53 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xff50}, 0xc)

18:53:53 executing program 3:
syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0)
syz_io_uring_setup(0xb5b, &(0x7f0000000200), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x1bff, &(0x7f0000000340)={0x0, 0x16bf, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400))

18:53:53 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)

18:53:53 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000040)="30d9e2f1b8e87456f0a4e2f25908d55b00c00db7220654b096f713b9e3e40eee0877", 0x22}, {&(0x7f0000000180)="77a80a35d5b5f2131bac3204914d6598eb87aa04edbb7acb8b7480040dedca877c987f9aed197727255c816bd14789f3da66572b3647104d6107daeaaf7c3b0de53447c04998d310ef3580510d1a3fb09f088f09d7f6476ef83cdb33e05601501c2a935a9a34e7b3fffb94d3524a8d780a934680927e7468df4de1b57ca2ccdf8ac74d954e4ee645de3d892a384de3d8be74de2cbd483dc0d31e9c72896c6884a7a82eb3ddc762b3ec20bf98d2737cdff6390711ce48d72df0ef7e757a8c6d2204123c20a24560b39e84f2e782ef07fdd1da780079fd0fda7d", 0xd9}, {&(0x7f0000000400)="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", 0x706}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0)

18:53:53 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:53 executing program 1:
r0 = socket$inet6(0x2, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8940, 0x0)

18:53:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}})

18:53:54 executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)

18:53:54 executing program 0:
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:54 executing program 2:
r0 = socket$inet6(0x2, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8953, &(0x7f0000000000)={'wg2\x00'})

18:53:54 executing program 5:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000300), 0x0)

18:53:54 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getnetconf={0x14}, 0x14}}, 0x0)

18:53:54 executing program 3:
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0)

18:53:54 executing program 4:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000100)='2\x00', 0x2)

18:53:54 executing program 0:
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:54 executing program 5:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000300), 0x0)

18:53:54 executing program 2:
syz_io_uring_setup(0x7999, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0)
syz_io_uring_setup(0xb5b, &(0x7f0000000200), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

18:53:54 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0)
r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000000)=0x3)

18:53:54 executing program 1:
syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1c37, &(0x7f0000000000)={0x0, 0x918a, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

18:53:55 executing program 3:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0xa, 0x0, 0x0)

18:53:55 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:55 executing program 5:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000300), 0x0)

18:53:55 executing program 2:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000)

18:53:55 executing program 1:
r0 = socket$inet6(0x2, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8943, &(0x7f0000000000)={'wg2\x00'})

[  941.352720][T12094] usb 5-1: new high-speed USB device number 13 using dummy_hcd
18:53:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8948, &(0x7f00000000c0)={'bond0\x00', @ifru_map})

18:53:55 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:55 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:55 executing program 2:
openat$adsp1(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0)

[  941.712307][T12094] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  941.729178][T12094] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40
[  941.739585][T12094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.913683][T12094] usb 5-1: config 0 descriptor??
18:53:56 executing program 3:
r0 = io_uring_setup(0x7675, &(0x7f0000000440))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

[  941.959898][T12094] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  942.157541][T12094] usb 5-1: USB disconnect, device number 13
18:53:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', @ifru_data=&(0x7f0000000000)="4f01794423284fa658fb543330880ef92fc9d339ccac3162fdf5d0719697ac3e"})

18:53:56 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:56 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r1}}, 0x10)

18:53:56 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18)

18:53:56 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000001340), 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:56 executing program 3:
syz_mount_image$ufs(0x0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x2, &(0x7f0000002c40)=[{&(0x7f0000002ac0)}, {0x0}], 0x10, &(0x7f0000002c80)={[{'\''}, {'/dev/adsp1\x00'}, {'#\xef^.&'}, {'\x00'}, {'/dev/btrfs-control\x00'}, {'{'}, {}, {'/proc/capi/capi20\x00'}, {'.'}], [{@subj_role={'subj_role', 0x3d, '/dev/btrfs-control\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}]})

18:53:56 executing program 2:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0xc0002, 0x0)

18:53:57 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:57 executing program 3:
pselect6(0x40, &(0x7f0000003b80), 0x0, 0x0, &(0x7f0000003c40), 0x0)

18:53:57 executing program 1:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0)

18:53:57 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:57 executing program 4:
syz_mount_image$ufs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002c40)=[{0x0, 0x0, 0x3ff}], 0x0, 0x0)

18:53:57 executing program 2:
socketpair(0x25, 0x5, 0x400, &(0x7f0000000080))

[  943.342215][T17715] loop4: detected capacity change from 0 to 3
18:53:57 executing program 5:
r0 = syz_io_uring_setup(0x7999, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:57 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$link(0x2, r0, 0x0)

18:53:57 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:53:57 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:57 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x3}, {0x61}, {0x6}]})

18:53:57 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x48}, {0x6}]})

[  943.682212][ T5809] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
18:53:57 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8949, &(0x7f0000000040)={'veth0_to_batadv\x00', @link_local})

18:53:57 executing program 5:
r0 = syz_io_uring_setup(0x7999, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:58 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x880, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:58 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:53:58 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="c9f168777e04fc77798318093793ac30c71ea9f6b9c471944b7a528ff1a9342cba0236c1fdd921c941dcdbafb7616701bbb796384cdbec6ce72256e11e757e45cc5c14ee52c5d2404010619ed83066785b9e6a4d1a13125f9361cf4cc1d5c9838386", 0x62}, {&(0x7f0000000100)="b5c38a47a06afe45e43003b4a9ecd9c4fa7e9e9eca830dd123cdd57b3c6858e4274d49984c62eabef73b963db4f54e6c0e91a5dbb3766060815d61f317088bdd4a68261a9f008c2bd96b2e3ae7a7df68bf9075662c089b180cc45231aef28c366d", 0x61}, {&(0x7f0000000180)="91877686e729a18e376c31a2345f9aa01d2fcbce4aa27f481a8a9a860045b27e0f57b03615483dd04f33baa7e2808dc0b4943c25d9e97822ee05fb3526664cd38ceccc711fa3b5822d021fd769879d0838dececc38a5912acfcb5210fc182d340e1876c6951512fc920d9d667959d45c482ee1db7982314b55816451a34fbdddf3dacf467b750d0fa98f18c68dddfb669284ec1cbe283cd92f13630a75129a29190d81127f9c", 0xa6}, {&(0x7f0000000700)="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", 0xe97}, {0x0}, {&(0x7f0000000280)='q', 0x1}], 0x6, &(0x7f0000000400)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0)

18:53:58 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x4b47, 0x0)

18:53:58 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x3d}, {0x6}]})

18:53:58 executing program 5:
r0 = syz_io_uring_setup(0x7999, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:58 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0xffffffffffffffff}}]})

18:53:58 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x87}, {0x6}]})

18:53:58 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xac}, {0x6}]})

18:53:58 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

[  944.765726][T17751] exfat: Bad value for 'dmask'
18:53:58 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'ip6_vti0\x00', @dev})

18:53:58 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:59 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, 0x0)

[  945.060096][ T1195] ieee802154 phy0 wpan0: encryption failed: -22
[  945.067105][ T1195] ieee802154 phy1 wpan1: encryption failed: -22
18:53:59 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:59 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:53:59 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, 0x0)

18:53:59 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x54e3, 0x0)

18:53:59 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:53:59 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:53:59 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'veth1_to_bridge\x00'})

18:53:59 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

18:54:00 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:54:00 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, 0x0)

18:54:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)

18:54:00 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x80, 0x8}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20)

18:54:00 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:00 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x50}, {0x6}]})

18:54:00 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:54:00 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x61, 0x0, 0x0, 0x10}]})

18:54:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x5}]})

18:54:00 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:00 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000014c0)={[{@gid}, {@discard}, {@uid={'uid', 0x3d, 0xee00}}]})

18:54:00 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x45, 0x0, 0x2}, {}]})

18:54:01 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000300), 0x0)

18:54:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:01 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xffffff1e}]})

18:54:01 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000000)=r0, 0x4)

[  947.360774][T17809] exFAT-fs (loop0): invalid boot record signature
[  947.368065][T17809] exFAT-fs (loop0): failed to read boot sector
[  947.374671][T17809] exFAT-fs (loop0): failed to recognize exfat type
18:54:01 executing program 5:
syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000300), 0x0)

18:54:01 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r0}, 0x10)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x0, 0x0}, 0x30)

18:54:01 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)

18:54:01 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000014c0)={[{@gid}, {@discard}]})

18:54:01 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x35}, {0x6}]})

18:54:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x400454dc, &(0x7f0000000040)=0x1)

18:54:02 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:54:02 executing program 5:
syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000300), 0x0)

[  948.043546][T17825] exFAT-fs (loop0): invalid boot record signature
[  948.050229][T17825] exFAT-fs (loop0): failed to read boot sector
[  948.056914][T17825] exFAT-fs (loop0): failed to recognize exfat type
18:54:02 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)

18:54:02 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x3}, {0x60}, {0x6}]})

18:54:02 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000014c0)={[{@gid}]})

18:54:02 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x800454d7, &(0x7f0000000040))

18:54:02 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x80, 0x8}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r0, &(0x7f0000000240), 0x0}, 0x20)

18:54:02 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)

18:54:02 executing program 5:
syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000300), 0x0)

[  948.714251][T17840] exFAT-fs (loop0): invalid boot record signature
[  948.721235][T17840] exFAT-fs (loop0): failed to read boot sector
[  948.727837][T17840] exFAT-fs (loop0): failed to recognize exfat type
18:54:02 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x400454d4, 0x0)

18:54:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4d, 0x0, 0x2}, {}]})

18:54:03 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x106, 0x1, 0x80100005}, 0x48)

18:54:03 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:03 executing program 5:
r0 = syz_io_uring_setup(0x7999, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, 0x0, 0x0)

18:54:03 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000014c0))

18:54:03 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
close(r1)

18:54:03 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000002c0)=""/227, 0x1a, 0xe3, 0x1}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x81}, 0x8)

18:54:03 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

[  949.430454][T17860] exFAT-fs (loop0): invalid boot record signature
[  949.437687][T17860] exFAT-fs (loop0): failed to read boot sector
[  949.444163][T17860] exFAT-fs (loop0): failed to recognize exfat type
18:54:03 executing program 5:
socketpair(0x2, 0x3, 0x0, &(0x7f00000000c0))

18:54:03 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000001180)='W', 0x1}], 0x3, 0x0, 0x2}, 0x0)

18:54:03 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80)

18:54:03 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xca, &(0x7f0000000080)=""/202, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:54:04 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:04 executing program 3:
syz_clone(0x89848000, 0x0, 0x0, 0x0, 0x0, 0x0)

18:54:04 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000014c0))

18:54:04 executing program 4:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x48)

18:54:04 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wg2\x00', 0x400})

18:54:04 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:04 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  950.387708][T17883] exFAT-fs (loop0): invalid boot record signature
[  950.394575][T17883] exFAT-fs (loop0): failed to read boot sector
[  950.400886][T17883] exFAT-fs (loop0): failed to recognize exfat type
18:54:04 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xffff, 0xff, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)

18:54:04 executing program 0:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000014c0))

18:54:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})

18:54:04 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@bloom_filter={0x1e, 0x0, 0x9, 0x1}, 0x48)

18:54:04 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000031c0)={&(0x7f0000002f40)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000003180)=[@ip_ttl={{0x14}}], 0x18}, 0x801)

18:54:04 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

[  951.025245][T17899] exFAT-fs (loop0): invalid boot record signature
[  951.032055][T17899] exFAT-fs (loop0): failed to read boot sector
[  951.038340][T17899] exFAT-fs (loop0): failed to recognize exfat type
18:54:05 executing program 3:
bpf$MAP_CREATE(0x1d, &(0x7f00000019c0)=@bloom_filter, 0x48)

18:54:05 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:54:05 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_batadv\x00'})

18:54:05 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:05 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)

18:54:05 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f00000000c0)=0x10)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0)

18:54:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0x0, @local}]}, &(0x7f00000002c0)=0x10)

18:54:05 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@generic={0x5}], &(0x7f00000002c0)='GPL\x00', 0x5, 0xa8, &(0x7f00000000c0)=""/168, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:54:05 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:05 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:54:05 executing program 0:
r0 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0x401c5820, 0x0)

18:54:06 executing program 4:
r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "e989d92da356b2e4826e37251d31bced0eea42180e23e3d4aef61b5e087266b6d44ce337ab9ac6190c1aac3f84937c520521c042545ff4f5d20735c1a4254e73"}, 0x48, 0xfffffffffffffffc)
keyctl$read(0xb, r0, 0x0, 0x0)

18:54:06 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

18:54:06 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:06 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xe849a)

18:54:06 executing program 2:
syz_mount_image$squashfs(&(0x7f0000000780), &(0x7f00000007c0)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0))

18:54:06 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x108a0e)

18:54:06 executing program 4:
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="e4fd413277bc3cdcf92bc6b4be1c9554b258f6cbbf1a834381b5ee32ce106dc8d0", 0x21, r0)

18:54:06 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:06 executing program 2:
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

18:54:06 executing program 5:
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000002c0)="722ea0f29ac3a9695d7088278b8a54545ccd53e320", 0x15, r0)

18:54:06 executing program 0:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x419, 0x600, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0xa5}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x40, 0x8, 0x1}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x7f, 0x0, 0x5}, 0x13, &(0x7f0000000080)={0x5, 0xf, 0x13, 0x2, [@generic={0x3, 0x10, 0x5}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x81, 0x80, 0x0, 0x7}]}, 0x1, [{0x0, 0x0}]})

18:54:07 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20001810}, 0x0)
write$proc_mixer(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

[  952.960821][T17948] trusted_key: encrypted_key: master key parameter '' is invalid
18:54:07 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00'})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:07 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

18:54:07 executing program 2:
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)={0x3, 0x0, @b}, 0x48, 0xffffffffffffffff)
r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x0, 0x0, @d}, 0x18, r0)
request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)

18:54:07 executing program 5:
pipe2$watch_queue(&(0x7f0000000040), 0x80)
add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="e0847706a5e48c91fa403a1d", 0xfffff, 0xfffffffffffffffc)

18:54:07 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

[  953.362160][T10336] usb 1-1: new high-speed USB device number 5 using dummy_hcd
18:54:07 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0)

18:54:07 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00'})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:07 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)

18:54:07 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

[  953.612903][T10336] usb 1-1: Using ep0 maxpacket: 16
18:54:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0x8140aecc, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

[  953.842926][T10336] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  954.113946][T10336] usb 1-1: string descriptor 0 read error: -22
[  954.120446][T10336] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.40
[  954.130007][T10336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.211578][T10336] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  954.408617][T10336] usb 1-1: USB disconnect, device number 5
18:54:08 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30)

18:54:09 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00'})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)

18:54:09 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)

18:54:09 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000280))

18:54:09 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

18:54:09 executing program 4:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x1, [{}]})

18:54:09 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x48)

18:54:09 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)

18:54:09 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000002c0)={0x91a, 0x0, 0x0, 0x0, 0x0, 0x0})

18:54:09 executing program 5:
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x419, 0x600, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xf1c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200}, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

18:54:09 executing program 4:
syz_mount_image$qnx6(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff}], 0x0, 0x0)

18:54:09 executing program 2:
add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000200)="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", 0xe01, 0xfffffffffffffffe)

[  955.802553][ T3568] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  955.825041][T17999] loop4: detected capacity change from 0 to 264192
18:54:10 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x28002)
write$tcp_mem(r0, 0x0, 0x0)

18:54:10 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000540))

18:54:10 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)

18:54:10 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000012240), 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})

18:54:10 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
read$usbmon(r0, &(0x7f000002b280)=""/102400, 0xfffffd35)

[  956.072114][ T3568] usb 6-1: Using ep0 maxpacket: 16
18:54:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty, {[@cipso={0x86, 0xf, 0x0, [{0x0, 0x9, "e0b9fa8420998d"}]}]}}}}})

[  956.242269][ T3568] usb 6-1: unable to get BOS descriptor or descriptor too short
[  956.323130][ T3568] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
18:54:10 executing program 4:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x3000)=nil)

18:54:10 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0)

18:54:10 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x502})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)

[  956.622754][ T3568] usb 6-1: string descriptor 0 read error: -22
[  956.629256][ T3568] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.40
[  956.638669][ T3568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.795795][ T3568] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[  956.993270][ T3568] usb 6-1: USB disconnect, device number 15
18:54:11 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1001, @fixed}, 0xe)

18:54:11 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr=' \x01\x00', 0x40c7}})

18:54:11 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0))

18:54:11 executing program 1:
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000140)='\x00\x00\xf5\xfb\xe0+N\xb4aP\xfel\f\xb4\t\x00\x00\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000100)='/*:#/\x00')

18:54:11 executing program 2:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)

18:54:11 executing program 3:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

18:54:11 executing program 1:
r0 = socket(0xa, 0x3, 0x8)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0)

18:54:11 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x28002)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

18:54:11 executing program 2:
prctl$PR_SET_MM(0x1d, 0x0, &(0x7f0000ffd000/0x3000)=nil)

18:54:11 executing program 3:
getrlimit(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24)

18:54:11 executing program 0:
socket(0x10, 0x2, 0x7f)

18:54:12 executing program 5:
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x2000)=nil)

18:54:12 executing program 1:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)

18:54:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, 0x0)

18:54:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@setlink={0x54, 0x13, 0x523, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}, @IFLA_MASTER={0x8}, @IFLA_LINKMODE={0x5}, @IFLA_IFALIASn={0x4}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x54}}, 0x0)

18:54:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0)

[  958.389634][T18049] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
18:54:12 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}, 0x1, 0x0, 0x7c3b}, 0x0)

18:54:12 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f00000001c0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)

18:54:12 executing program 2:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x12, 0x0, 0x0, 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})

18:54:12 executing program 4:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

18:54:12 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10)
getresgid(&(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000080))

18:54:13 executing program 3:
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x10000, 0x0, &(0x7f0000ff0000/0x10000)=nil)

18:54:13 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48)

18:54:13 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x642)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x100000}, 0x7ffff000)

18:54:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

18:54:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8901, &(0x7f0000000200)={'ip_vti0\x00', 0x0})

18:54:13 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10)
getresgid(&(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000080))

18:54:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a0, &(0x7f0000000200)={'ip_vti0\x00', 0x0})

[  959.366652][T18068] binder: 18067:18068 ioctl c0306201 0 returned -14
18:54:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x4b6d, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
fstatfs(r1, &(0x7f0000000000)=""/226)

18:54:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)=@bridge_delvlan={0x24, 0x11, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x24}}, 0x0)

18:54:13 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_map={0x3ff}})

18:54:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001480)=@bridge_delvlan={0x18, 0x5e, 0x1}, 0x18}}, 0x0)

18:54:13 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10)
getresgid(&(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000080))

18:54:14 executing program 4:
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)

18:54:14 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0)

18:54:14 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x642)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x1f00}, 0x7ffff000)

18:54:14 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x4003fa)

18:54:14 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
write$eventfd(r1, &(0x7f0000000080)=0x7, 0x8)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x0, r1})

18:54:14 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10)
getresgid(&(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000080))

18:54:14 executing program 4:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0xfffffffffffffdc6)

18:54:14 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', 0x0})

18:54:14 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xc8080)
read$usbmon(r0, &(0x7f0000032100)=""/102392, 0x18ff8)

18:54:14 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x28002)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000100)='/dev/vcs\xff\xff\x00\xff\xff\xfe\x00\x00\x06\x00R\x10\x01\xa10\xbe\xd9#\x91Pa\xea\x98LY\r\x85\xc4\xf9\x8e0\xec\xc3}\xde\xcf\xa2\b\xfcw\x7f\x19\x1e\xc6q$}\xf3\xf3\xfa\x01N\xfe\x90\x80e*W\xc5\xe7O\xc9\xc2q\xa7\x8a\x9a^\xf8\xd9\xcb\xb1\xf9\b\xabo\xe8\xd2h\xa3\x17\xae\xc0\x13\xaa{-\xdd\xd4o\x9e\t\xc8\b\v\x95\x17\xcb\x05\x01\x00\x00\xdb\x9cE\xa8\xcd\x9f\xfb\x91\xfa\xc6%\xe5\xb2\xbfDe\x99Z+k\x86\xaed00\xb1\xa1\x93\xf6\x03F\x06\x00\x00\x00\xf2\x7f\x94\x12\x1d\xe5\x85\x0f{\x12\vKi\xd1$\x8f\xafMB\xb4\xdc\xf5\xe9\x00\x00\x00')
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

18:54:15 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000000e24d59e26fbf9cc00000850001000f0000009504ac89d8224b9f8f7f501460a4994b01e54b04b3a7a67a7876e85e66ae3089bba8811c8ed0a08e377cf002cc13122bc383e4c1aa8845fe60ba2468238cf6a08f4f4d94de70b5f24e97c077219f02d092350a6272104e9f4807a27beffc572ec0d6d94ea41bdfda9f09b7285818a1796708296f8a054681807fc6eafa32fbe0ab0975ee7c1bf7ddb9633ef981541d883e95fecabb2b"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10)
getegid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
getpid()
r1 = socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0)
setresgid(0xee01, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00')
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100)

18:54:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541e, 0x0)

18:54:16 executing program 3:
timerfd_create(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
readv(r0, &(0x7f0000000000), 0x0)

18:54:16 executing program 5:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pidfd_getfd(r1, r2, 0x0)

18:54:16 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000244", 0x65, 0x400}], 0x0, &(0x7f0000000300))

18:54:16 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000800))

18:54:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001480)=@bridge_delvlan={0x18, 0x1c, 0x1}, 0x18}}, 0x0)

18:54:16 executing program 3:
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000)

18:54:16 executing program 4:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0xfffffffffffffdc6)

18:54:16 executing program 2:
mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x0, 0x69f8950acc57ddf6, 0xffffffffffffffff, 0x0)

18:54:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000001c0))

18:54:16 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000800))

18:54:16 executing program 0:
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

18:54:16 executing program 3:
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6)

18:54:17 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000}, 0x100)
sendmsg$inet(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000004600)="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", 0xff0}, {&(0x7f0000005600)="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", 0x1e3}], 0x3, &(0x7f0000001c40)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x97}, @cipso={0x86, 0x48, 0x1, [{0x7, 0xa, "86f46ae195189272"}, {0x7, 0x4, "9a3e"}, {0x5, 0x4, "f8f9"}, {0x2, 0x10, "7c49913d1fb5bd83358a748c4768"}, {0x2, 0xe, "b7df7048616b003bb16d5c33"}, {0x2, 0x9, "7a106950766138"}, {0x6, 0x9, "2a6783974f42c0"}]}]}}}, @ip_retopts={{0x164, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0xb0, 0x1, 0x4, [{@multicast1, 0x3}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9d7}, {@private=0x1, 0x40}, {@private=0xa010102, 0x8}, {@loopback, 0x3f}, {@broadcast, 0x10000}, {@multicast1, 0x8}, {@local, 0x100}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x1b, 0xa4, [@loopback, @rand_addr=0x64010100, @loopback, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}]}, @end, @cipso={0x86, 0x57, 0x1, [{0x5, 0xd, "323f5611969de7f3f0b99d"}, {0x6, 0x2}, {0x1, 0xd, "07dd0b4faa01e554ee2d5a"}, {0x7, 0x5, "ebc4ec"}, {0x5, 0xc, "100e9338f93373ba0900"}, {0x6, 0xa, "b2b39eb952860027"}, {0x2, 0xf, "3420497a874c9f78ce8e21667f"}, {0x5, 0x9, "04bb6660283cde"}, {0x2, 0x2}]}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0xf, "572b78de499d28a5baa2fb51f6"}, {0x0, 0x2}, {0x1, 0x3, '#'}, {0x1, 0x3, 'F'}, {0x1, 0x4, "d767"}, {0x5, 0xb, "90ac57f7420cb94981"}, {0x6, 0x6, "efef9124"}, {0x6, 0x12, "ea409def0c96d3b07ef1d4250356434a"}, {0x0, 0x8, "ea31d7ff5e48"}]}, @timestamp_prespec={0x44, 0x24, 0xdb, 0x3, 0x3, [{@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f}, {@remote, 0x8000}]}, @rr={0x7, 0x1f, 0xc5, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@end, @generic={0x83, 0x12, "e37769b1cd30c13a1e7573ab7cccb8bf"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x55, 0x2, [{0x6, 0x11, "ad1f31c7f7a4a906f6c2a44a6939d7"}, {0x1, 0x11, "c357c129b9861548a9148f3f1e4f31"}, {0x0, 0x12, "7f02fdf5cb7ffe1f339424ecdc9f496a"}, {0x6, 0x8, "819c42579cde"}, {0x5, 0x8, "15b840520e36"}, {0x7, 0x6, "0ee4afd1"}, {0x7, 0x5, "20abc7"}]}, @timestamp_addr={0x44, 0x2c, 0xd, 0x1, 0xb, [{@broadcast, 0x7f}, {@broadcast}, {@rand_addr=0x64010101, 0x4}, {@rand_addr=0x64010101, 0x10001}, {@multicast1}]}]}}}], 0x2c0}, 0x8080)

18:54:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8934, &(0x7f0000000200)={'ip_vti0\x00', 0x0})

18:54:17 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x28002)
write$tcp_mem(r0, &(0x7f0000000400), 0x20000448)

18:54:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000001c0))

18:54:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x4b6d, 0x0)

18:54:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8911, &(0x7f0000000480)={'syztnl1\x00', 0x0})

18:54:18 executing program 4:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0xfffffffffffffdc6)

18:54:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001480)=@bridge_delvlan={0x18, 0x58, 0x1}, 0x18}}, 0x0)

18:54:18 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x28002)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x0)

18:54:18 executing program 1:
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x163042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40087602, 0x0)

18:54:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe)

[  964.497586][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
18:54:18 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x30)

18:54:18 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b35d479a12dc577586805c9372d193054550071ddf44e88b41462bde61dcbe9d43104cbb5c17a4eedcd8e456f01e778db7092daadd56a5a103c2a79ac50c9f"}, 0x60)

18:54:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

18:54:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001480)=@bridge_delvlan={0x10, 0x71, 0x1}, 0x18}}, 0x0)

18:54:19 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001480)=@bridge_delvlan={0x18, 0x12, 0x1}, 0x18}}, 0x0)

18:54:19 executing program 5:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@name, 0xe, &(0x7f00000000c0)=[{&(0x7f0000000040)="ed535e792bc729649e6caddf665cf962290ea098e0f69e1d0efd62a8c0095c24a2cb721f54f014c58d310c2531fc9d7a539dd3bfb60f46e7bada0cc6f689fd2413cbca3d2495469bd0726bb5aba193557f0209e7506b6f51aea29be909", 0x101d0}], 0x1, &(0x7f0000000180)="09647093d7d10c2c8839402b4ea6dba1b75ca4c6162a1f863a", 0x19, 0x80}, 0x0)
recvmsg(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@isdn, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)=""/82, 0x52}], 0x1}, 0x0)

18:54:19 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x642)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10}, 0x7ffff000)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

18:54:20 executing program 4:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0xfffffffffffffdc6)

18:54:20 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000200)="9732ad2021e96a8bdad6aeb22b73defb095dde5b9c978f9b39dd3640a783479b69b68f605118666853eda436015c3b13d78072009ea165c887a5d22474dffb8756e39c598479f0f28f309278a53964c9c81c92c163cd148f60b1b7f06d6d0fc20b1a2b02d422365b914424b9b878aa68fe3a579b9747269b35845c2110c1f338c2127236db032565eb81b110d94ed7fa722236a3b1a0f0773bfab930ced71c52853b2d9e46d88983379db350641ecd543eb2df9e387e405989bc565e7643a27eac5c93a732f02889ae8ce2b7c95f08b24afabbe9971675ff01b554677710ad1392", 0xe1)

18:54:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8935, &(0x7f0000000200)={'ip_vti0\x00', 0x0})

18:54:20 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

18:54:20 executing program 2:
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0x0, 0x3)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4003fa)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x163042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x6, r0, 0x69a0300})

18:54:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001480)=@bridge_delvlan={0x18, 0x29, 0x1}, 0x18}}, 0x0)

18:54:20 executing program 3:
syz_open_dev$vcsn(0x0, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)

18:54:20 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x642)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10}, 0x7ffff000)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

18:54:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8949, &(0x7f0000000480)={'syztnl1\x00', 0x0})

[  967.012420][   T24] audit: type=1800 audit(1648839261.046:25): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1162 res=0 errno=0
18:54:21 executing program 5:
r0 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x9cc5bcdd17d1cee4}, 0x10)

18:54:21 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
read$usbmon(r0, &(0x7f0000032100)=""/102392, 0x18ff8)

18:54:21 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000021c0)=[{&(0x7f0000001000)="aa", 0x1}], 0x1)

18:54:22 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)

18:54:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="dda7169d5b7562")

18:54:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000200)={'ip_vti0\x00', 0x0})

[  968.456227][T18220] =====================================================
[  968.463386][T18220] BUG: KMSAN: uninit-value in kallsyms_lookup_buildid+0x1ee/0xb10
[  968.471273][T18220]  kallsyms_lookup_buildid+0x1ee/0xb10
[  968.476815][T18220]  __sprint_symbol+0x166/0x650
[  968.481659][T18220]  sprint_backtrace+0x7f/0x90
[  968.486386][T18220]  symbol_string+0x421/0x6e0
[  968.491070][T18220]  pointer+0x136e/0x2060
[  968.495379][T18220]  vsnprintf+0x1a9b/0x3650
[  968.499845][T18220]  seq_printf+0x314/0x4f0
[  968.504259][T18220]  proc_pid_stack+0x3b7/0x4d0
[  968.509032][T18220]  proc_single_show+0x1cc/0x370
[  968.513950][T18220]  seq_read_iter+0xaac/0x2150
[  968.518689][T18220]  seq_read+0x7a6/0x990
[  968.522899][T18220]  vfs_read+0x6c8/0x1980
[  968.527297][T18220]  ksys_read+0x28b/0x510
[  968.531601][T18220]  __ia32_sys_read+0xdb/0x120
[  968.536345][T18220]  __do_fast_syscall_32+0x96/0xf0
[  968.541443][T18220]  do_fast_syscall_32+0x34/0x70
[  968.546360][T18220]  do_SYSENTER_32+0x1b/0x20
[  968.550933][T18220]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  968.557340][T18220] 
[  968.559681][T18220] Uninit was created at:
[  968.564011][T18220]  kmem_cache_alloc_trace+0xaa1/0x1120
[  968.569526][T18220]  proc_pid_stack+0x103/0x4d0
[  968.574270][T18220]  proc_single_show+0x1cc/0x370
[  968.579186][T18220]  seq_read_iter+0xaac/0x2150
[  968.583919][T18220]  seq_read+0x7a6/0x990
[  968.588130][T18220]  vfs_read+0x6c8/0x1980
[  968.592434][T18220]  ksys_read+0x28b/0x510
[  968.596740][T18220]  __ia32_sys_read+0xdb/0x120
[  968.601492][T18220]  __do_fast_syscall_32+0x96/0xf0
[  968.606594][T18220]  do_fast_syscall_32+0x34/0x70
[  968.611538][T18220]  do_SYSENTER_32+0x1b/0x20
[  968.616103][T18220]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  968.622511][T18220] 
[  968.624855][T18220] CPU: 0 PID: 18220 Comm: syz-executor.0 Not tainted 5.17.0-syzkaller #0
[  968.633320][T18220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  968.643452][T18220] =====================================================
[  968.650406][T18220] Disabling lock debugging due to kernel taint
[  968.660126][T18220] Kernel panic - not syncing: kmsan.panic set ...
[  968.666587][T18220] CPU: 0 PID: 18220 Comm: syz-executor.0 Tainted: G    B             5.17.0-syzkaller #0
[  968.676445][T18220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  968.686550][T18220] Call Trace:
[  968.689855][T18220]  <TASK>
[  968.692823][T18220]  dump_stack_lvl+0x1ff/0x28e
[  968.697579][T18220]  dump_stack+0x25/0x28
[  968.701799][T18220]  panic+0x487/0xe1f
[  968.705770][T18220]  ? add_taint+0x181/0x210
[  968.710291][T18220]  ? _raw_spin_unlock_irqrestore+0x78/0xb0
[  968.716166][T18220]  kmsan_report+0x2e6/0x2f0
[  968.720759][T18220]  ? __msan_warning+0xb8/0x130
[  968.725601][T18220]  ? kallsyms_lookup_buildid+0x1ee/0xb10
[  968.731311][T18220]  ? __sprint_symbol+0x166/0x650
[  968.736323][T18220]  ? sprint_backtrace+0x7f/0x90
[  968.741226][T18220]  ? symbol_string+0x421/0x6e0
[  968.746048][T18220]  ? pointer+0x136e/0x2060
[  968.750522][T18220]  ? vsnprintf+0x1a9b/0x3650
[  968.755171][T18220]  ? seq_printf+0x314/0x4f0
18:54:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8993, &(0x7f0000000480)={'syztnl1\x00', 0x0})

[  968.759730][T18220]  ? proc_pid_stack+0x3b7/0x4d0
[  968.764647][T18220]  ? proc_single_show+0x1cc/0x370
[  968.769742][T18220]  ? seq_read_iter+0xaac/0x2150
[  968.774658][T18220]  ? seq_read+0x7a6/0x990
[  968.779060][T18220]  ? vfs_read+0x6c8/0x1980
[  968.783540][T18220]  ? ksys_read+0x28b/0x510
[  968.788021][T18220]  ? __ia32_sys_read+0xdb/0x120
[  968.792937][T18220]  ? __do_fast_syscall_32+0x96/0xf0
[  968.798212][T18220]  ? do_fast_syscall_32+0x34/0x70
[  968.803306][T18220]  ? do_SYSENTER_32+0x1b/0x20
[  968.808048][T18220]  ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  968.814630][T18220]  ? kernel_text_address+0x1f1/0x2b0
[  968.820055][T18220]  ? stack_trace_save+0x43/0x60
[  968.825051][T18220]  ? update_stack_state+0x883/0xa60
[  968.830354][T18220]  ? __stack_depot_save+0x1b1/0x4d0
[  968.835638][T18220]  ? kmsan_get_metadata+0x33/0x220
[  968.840826][T18220]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  968.846709][T18220]  ? futex_wait_queue+0x24b/0x420
[  968.851837][T18220]  __msan_warning+0xb8/0x130
[  968.856495][T18220]  kallsyms_lookup_buildid+0x1ee/0xb10
[  968.862019][T18220]  ? kmsan_internal_set_shadow_origin+0x5e/0xc0
[  968.868331][T18220]  ? futex_wait_queue+0x24b/0x420
[  968.873405][T18220]  ? futex_wait_queue+0x24c/0x420
[  968.878469][T18220]  __sprint_symbol+0x166/0x650
[  968.883297][T18220]  ? futex_wait_queue+0x24c/0x420
[  968.888372][T18220]  sprint_backtrace+0x7f/0x90
[  968.893085][T18220]  ? futex_wait_queue+0x24c/0x420
[  968.898156][T18220]  symbol_string+0x421/0x6e0
[  968.902790][T18220]  ? futex_wait_queue+0x24c/0x420
[  968.907871][T18220]  ? __kernel_text_address+0x32/0xf0
[  968.913205][T18220]  ? __stack_depot_save+0x1b1/0x4d0
[  968.918462][T18220]  ? __stack_depot_save+0x21/0x4d0
[  968.923624][T18220]  ? kmsan_get_metadata+0x33/0x220
[  968.928791][T18220]  ? kmsan_internal_set_shadow_origin+0x5e/0xc0
[  968.935090][T18220]  ? kmsan_get_metadata+0x33/0x220
[  968.940261][T18220]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  968.946131][T18220]  pointer+0x136e/0x2060
[  968.950409][T18220]  ? futex_wait_queue+0x24c/0x420
[  968.955476][T18220]  ? kmsan_get_metadata+0x33/0x220
[  968.960643][T18220]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  968.966508][T18220]  ? futex_wait_queue+0x24c/0x420
[  968.971575][T18220]  vsnprintf+0x1a9b/0x3650
[  968.976052][T18220]  seq_printf+0x314/0x4f0
[  968.980437][T18220]  ? futex_wait_queue+0x24c/0x420
[  968.985500][T18220]  ? proc_pid_stack+0x305/0x4d0
[  968.990415][T18220]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  968.996287][T18220]  ? futex_wait_queue+0x24c/0x420
[  969.001355][T18220]  proc_pid_stack+0x3b7/0x4d0
[  969.006113][T18220]  proc_single_show+0x1cc/0x370
[  969.011189][T18220]  ? proc_pid_wchan+0x260/0x260
[  969.016089][T18220]  ? proc_single_open+0x90/0x90
[  969.020983][T18220]  seq_read_iter+0xaac/0x2150
[  969.025705][T18220]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  969.031580][T18220]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  969.037475][T18220]  seq_read+0x7a6/0x990
[  969.041704][T18220]  ? seq_open+0x320/0x320
[  969.046071][T18220]  vfs_read+0x6c8/0x1980
[  969.050361][T18220]  ? kmsan_internal_unpoison_memory+0x10/0x20
[  969.056498][T18220]  ? kmsan_get_metadata+0x33/0x220
[  969.061676][T18220]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  969.067549][T18220]  ksys_read+0x28b/0x510
[  969.071866][T18220]  __ia32_sys_read+0xdb/0x120
[  969.076596][T18220]  __do_fast_syscall_32+0x96/0xf0
[  969.081675][T18220]  ? irqentry_exit_to_user_mode+0x15/0x30
[  969.087451][T18220]  do_fast_syscall_32+0x34/0x70
[  969.092355][T18220]  do_SYSENTER_32+0x1b/0x20
[  969.096908][T18220]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  969.103295][T18220] RIP: 0023:0xf6e8d549
[  969.107388][T18220] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  969.127037][T18220] RSP: 002b:00000000f58875cc EFLAGS: 00000296 ORIG_RAX: 0000000000000003
[  969.135506][T18220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002380
[  969.143516][T18220] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000
[  969.151511][T18220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  969.159506][T18220] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  969.167501][T18220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  969.175512][T18220]  </TASK>
[  969.178717][T18220] Kernel Offset: disabled
[  969.222142][T18220] Rebooting in 86400 seconds..