ce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x8)
fcntl$addseals(r0, 0x409, 0x3e)

11:50:01 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="27010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

11:50:01 executing program 1:
io_setup(0x9e6a, &(0x7f00000001c0)=<r0=>0x0)
io_setup(0xe99, &(0x7f0000000080)=<r1=>0x0)
io_setup(0x0, 0x0)
io_getevents(r1, 0x4, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)={0x77359400})
io_destroy(r0)

11:50:01 executing program 0:
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x8)
fcntl$addseals(r0, 0x409, 0x3e)

11:50:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001340)={0x1, 0x0, [{0x482}]})

11:50:01 executing program 2:
io_setup(0x9e6a, &(0x7f00000001c0)=<r0=>0x0)
io_setup(0xe99, &(0x7f0000000080)=<r1=>0x0)
io_setup(0x0, 0x0)
io_getevents(r1, 0x4, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)={0x77359400})
io_destroy(r0)

11:50:01 executing program 4:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4104aec6, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

11:50:01 executing program 0:
mlock2(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x1)

11:50:02 executing program 5:
process_madvise(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)

11:50:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x50}}, 0x0)

11:50:02 executing program 4:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4104aec6, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

[ 3393.652196][ T9911] usb 4-1: new high-speed USB device number 6 using dummy_hcd
11:50:02 executing program 5:
process_madvise(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)

11:50:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x50}}, 0x0)

[ 3393.902515][ T9911] usb 4-1: Using ep0 maxpacket: 8
[ 3394.102365][ T9911] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca
[ 3394.111482][ T9911] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[ 3394.120037][ T9911] usb 4-1: Product: syz
[ 3394.173879][ T9911] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 3395.272440][ T9911] gspca_stk1135: reg_w 0x7 err -71
[ 3395.278655][ T9911] gspca_stk1135: serial bus timeout: status=0x00
[ 3395.286370][ T9911] gspca_stk1135: Sensor write failed
[ 3395.293002][ T9911] gspca_stk1135: serial bus timeout: status=0x00
[ 3395.300269][ T9911] gspca_stk1135: Sensor write failed
[ 3395.305750][ T9911] gspca_stk1135: serial bus timeout: status=0x00
[ 3395.321114][ T9911] gspca_stk1135: Sensor read failed
[ 3395.326480][ T9911] gspca_stk1135: serial bus timeout: status=0x00
[ 3395.333682][ T9911] gspca_stk1135: Sensor read failed
[ 3395.338912][ T9911] gspca_stk1135: Detected sensor type unknown (0x0)
[ 3395.345666][ T9911] gspca_stk1135: serial bus timeout: status=0x00
[ 3395.352460][ T9911] gspca_stk1135: Sensor read failed
[ 3395.357712][ T9911] gspca_stk1135: serial bus timeout: status=0x00
[ 3395.364245][ T9911] gspca_stk1135: Sensor read failed
[ 3395.369788][ T9911] gspca_stk1135: serial bus timeout: status=0x00
[ 3395.376295][ T9911] gspca_stk1135: Sensor write failed
[ 3395.381754][ T9911] gspca_stk1135: serial bus timeout: status=0x00
[ 3395.388195][ T9911] gspca_stk1135: Sensor write failed
[ 3395.393787][ T9911] stk1135: probe of 4-1:25.0 failed with error -71
[ 3395.409489][ T9911] usb 4-1: USB disconnect, device number 6
11:50:04 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x50}}, 0x0)

11:50:04 executing program 5:
process_madvise(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)

11:50:04 executing program 4:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4104aec6, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

11:50:04 executing program 1:
io_setup(0x9e6a, &(0x7f00000001c0)=<r0=>0x0)
io_setup(0xe99, &(0x7f0000000080)=<r1=>0x0)
io_setup(0x0, 0x0)
io_getevents(r1, 0x4, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)={0x77359400})
io_destroy(r0)

11:50:04 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="27010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

11:50:04 executing program 2:
io_setup(0x9e6a, &(0x7f00000001c0)=<r0=>0x0)
io_setup(0xe99, &(0x7f0000000080)=<r1=>0x0)
io_setup(0x0, 0x0)
io_getevents(r1, 0x4, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)={0x77359400})
io_destroy(r0)

11:50:04 executing program 5:
process_madvise(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)

11:50:04 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x50}}, 0x0)

11:50:04 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4104aec6, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

11:50:04 executing program 4:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4104aec6, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

11:50:04 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:04 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4104aec6, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

11:50:04 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0xffd, 0x4)
sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3396.192383][T17698] usb 4-1: new high-speed USB device number 7 using dummy_hcd
11:50:04 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0xffd, 0x4)
sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:50:04 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4104aec6, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

[ 3396.452346][T17698] usb 4-1: Using ep0 maxpacket: 8
11:50:05 executing program 1:
io_setup(0x9e6a, &(0x7f00000001c0)=<r0=>0x0)
io_setup(0xe99, &(0x7f0000000080)=<r1=>0x0)
io_setup(0x0, 0x0)
io_getevents(r1, 0x4, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)={0x77359400})
io_destroy(r0)

[ 3396.652605][T17698] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca
[ 3396.678182][T17698] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[ 3396.692443][T17698] usb 4-1: Product: syz
[ 3396.773063][T17698] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 3397.862326][T17698] gspca_stk1135: reg_w 0x7 err -71
[ 3397.868602][T17698] gspca_stk1135: serial bus timeout: status=0x00
[ 3397.884486][T17698] gspca_stk1135: Sensor write failed
[ 3397.890099][T17698] gspca_stk1135: serial bus timeout: status=0x00
[ 3397.906959][T17698] gspca_stk1135: Sensor write failed
[ 3397.916711][T17698] gspca_stk1135: serial bus timeout: status=0x00
[ 3397.928258][T17698] gspca_stk1135: Sensor read failed
[ 3397.937717][T17698] gspca_stk1135: serial bus timeout: status=0x00
[ 3397.948925][T17698] gspca_stk1135: Sensor read failed
[ 3397.958410][T17698] gspca_stk1135: Detected sensor type unknown (0x0)
[ 3397.969788][T17698] gspca_stk1135: serial bus timeout: status=0x00
[ 3397.980231][T17698] gspca_stk1135: Sensor read failed
[ 3397.990113][T17698] gspca_stk1135: serial bus timeout: status=0x00
[ 3398.012345][T17698] gspca_stk1135: Sensor read failed
[ 3398.017589][T17698] gspca_stk1135: serial bus timeout: status=0x00
[ 3398.032196][T17698] gspca_stk1135: Sensor write failed
[ 3398.037546][T17698] gspca_stk1135: serial bus timeout: status=0x00
[ 3398.052205][T17698] gspca_stk1135: Sensor write failed
[ 3398.057570][T17698] stk1135: probe of 4-1:25.0 failed with error -71
[ 3398.076979][T17698] usb 4-1: USB disconnect, device number 7
11:50:06 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="27010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

11:50:06 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0xffd, 0x4)
sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:50:06 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0xffd, 0x4)
sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:50:06 executing program 2:
io_setup(0x9e6a, &(0x7f00000001c0)=<r0=>0x0)
io_setup(0xe99, &(0x7f0000000080)=<r1=>0x0)
io_setup(0x0, 0x0)
io_getevents(r1, 0x4, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)={0x77359400})
io_destroy(r0)

11:50:06 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:06 executing program 1:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:06 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0xffd, 0x4)
sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:50:06 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0xffd, 0x4)
sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:50:06 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0xffd, 0x4)
sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:50:07 executing program 4:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:07 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

[ 3398.702350][T30502] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 3398.972782][T30502] usb 4-1: Using ep0 maxpacket: 8
11:50:07 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

[ 3399.182642][T30502] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca
[ 3399.205895][T30502] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[ 3399.278724][T30502] usb 4-1: Product: syz
[ 3399.395334][T30502] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 3400.492919][T30502] gspca_stk1135: reg_w 0x7 err -71
[ 3400.499222][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3400.507191][T30502] gspca_stk1135: Sensor write failed
[ 3400.513045][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3400.519393][T30502] gspca_stk1135: Sensor write failed
[ 3400.525762][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3400.532274][T30502] gspca_stk1135: Sensor read failed
[ 3400.537522][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3400.544023][T30502] gspca_stk1135: Sensor read failed
[ 3400.549419][T30502] gspca_stk1135: Detected sensor type unknown (0x0)
[ 3400.564088][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3400.570467][T30502] gspca_stk1135: Sensor read failed
[ 3400.576154][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3400.583805][T30502] gspca_stk1135: Sensor read failed
[ 3400.589069][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3400.595722][T30502] gspca_stk1135: Sensor write failed
[ 3400.601065][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3400.607602][T30502] gspca_stk1135: Sensor write failed
[ 3400.613728][T30502] stk1135: probe of 4-1:25.0 failed with error -71
[ 3400.621959][T30502] usb 4-1: USB disconnect, device number 8
11:50:09 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="27010000679b5c084f17316aca6e000200010902120001190000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

11:50:09 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

11:50:09 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

11:50:09 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:09 executing program 1:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:09 executing program 4:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:09 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

[ 3401.342489][T30502] usb 4-1: new high-speed USB device number 9 using dummy_hcd
11:50:09 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

[ 3401.642853][T30502] usb 4-1: Using ep0 maxpacket: 8
11:50:10 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000010c0))

[ 3401.862574][T30502] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca
[ 3401.894127][T30502] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[ 3401.932311][T30502] usb 4-1: Product: syz
11:50:10 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000010c0))

[ 3401.983098][T30502] gspca_main: stk1135-2.14.0 probing 174f:6a31
11:50:10 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

11:50:10 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000010c0))

[ 3403.042472][T30502] gspca_stk1135: reg_w 0x7 err -71
[ 3403.048709][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3403.056447][T30502] gspca_stk1135: Sensor write failed
[ 3403.061797][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3403.068761][T30502] gspca_stk1135: Sensor write failed
[ 3403.074940][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3403.081391][T30502] gspca_stk1135: Sensor read failed
[ 3403.088045][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3403.094954][T30502] gspca_stk1135: Sensor read failed
[ 3403.100197][T30502] gspca_stk1135: Detected sensor type unknown (0x0)
[ 3403.107457][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3403.114899][T30502] gspca_stk1135: Sensor read failed
[ 3403.120159][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3403.127199][T30502] gspca_stk1135: Sensor read failed
[ 3403.132845][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3403.139203][T30502] gspca_stk1135: Sensor write failed
[ 3403.145494][T30502] gspca_stk1135: serial bus timeout: status=0x00
[ 3403.151843][T30502] gspca_stk1135: Sensor write failed
[ 3403.157642][T30502] stk1135: probe of 4-1:25.0 failed with error -71
[ 3403.177405][T30502] usb 4-1: USB disconnect, device number 9
11:50:11 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000010c0))

11:50:11 executing program 4:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:11 executing program 1:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:11 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r5 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x0, '\x00', 0x8})
writev(r2, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r7 = dup(r6)
sendfile(r6, r7, 0x0, 0x80006)

11:50:11 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000010c0))

11:50:12 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x1a})

11:50:12 executing program 5:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x16, 0x0, 0x0)

11:50:12 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000010c0))

11:50:12 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x1a})

11:50:12 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10122, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

11:50:12 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000010c0))

11:50:12 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x1a})

11:50:12 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000180)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0)

11:50:13 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x1a})

11:50:13 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

11:50:13 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

11:50:13 executing program 4:
capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0))
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

11:50:13 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x1001822, 0x4)

11:50:13 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = dup(r2)
sendfile(r2, r3, 0x0, 0x80006)

11:50:13 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:13 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:13 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x1001822, 0x4)

11:50:13 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

11:50:13 executing program 4:
capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0))
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

11:50:13 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x1001822, 0x4)

11:50:13 executing program 4:
capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0))
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

11:50:13 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

11:50:13 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x1001822, 0x4)

11:50:13 executing program 4:
capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0))
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

11:50:13 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:14 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = dup(r2)
sendfile(r2, r3, 0x0, 0x80006)

11:50:14 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:14 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:14 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:14 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:14 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:14 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:15 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:15 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:15 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:15 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = dup(r2)
sendfile(r2, r3, 0x0, 0x80006)

11:50:16 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:17 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:17 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:17 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = dup(r2)
sendfile(r2, r3, 0x0, 0x80006)

11:50:17 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:17 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:17 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:17 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:18 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = dup(r2)
sendfile(r2, r3, 0x0, 0x80006)

11:50:19 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:20 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:20 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:20 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = dup(r2)
sendfile(r2, r3, 0x0, 0x80006)

11:50:21 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:21 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = dup(r2)
sendfile(r2, r3, 0x0, 0x80006)

11:50:21 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:22 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:23 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:24 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:24 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:24 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:24 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000540), 0x9, 0x101e40)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)

11:50:24 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000540), 0x9, 0x101e40)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)

11:50:24 executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10)
remap_file_pages(&(0x7f0000582000/0x3000)=nil, 0x3000, 0x0, 0x9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

11:50:25 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:25 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000540), 0x9, 0x101e40)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)

11:50:25 executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10)
remap_file_pages(&(0x7f0000582000/0x3000)=nil, 0x3000, 0x0, 0x9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

11:50:25 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000540), 0x9, 0x101e40)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)

11:50:25 executing program 4:
r0 = syz_clone(0x0, 0x0, 0xfffffffffffffe41, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = pidfd_open(r0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = dup3(r3, r4, 0x0)
setns(r5, 0x10000000)

11:50:25 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="06", 0x1}], 0x1}}], 0x1, 0x4004809)

11:50:26 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002580)=ANY=[@ANYBLOB="000000727c9c26b21d000000000000000087ed7e9594fc83355c4ebef75ef15ab5a0bfb405acac235e78c202cf2a60457612fb477c76e32e3a6dbc7c998fb03824771a52def0fd7f94469f2a47fd88de8e964fbc6cc12e6e66ddb811c2fd9dc290aee6e39578aea53696d57d7ba0d49ed1e6ec356662f00b5c30e85a8dd331e4453c241dfbd306984f5db906b5e4235d1cbf3def9bc5f97c1637fe1ce583d9b342e43fab91af9ab7738b66", @ANYRES32])
dup(0xffffffffffffffff)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f00000001c0)={0x7fff, 0xffff}, &(0x7f0000000200))
signalfd(r5, &(0x7f0000000180)={[0xae, 0xffff]}, 0x8)
read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002680), &(0x7f0000000100))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="59008100280e623ec23686d932b7b69aaf79f0ceb6e166653e2cd8e6e3b19ff54af878685a1e0d8438b178ffd01a081b09c3cee9862e78d4d3197807834c6e59501138fd9ca00d7344aca1498dec0040a6aed6e672d5e806d97816f00c771a2285b4af2e2f979d72a4884f893ea0bbab50180407bf3a4d3027a58d2ffb3166dce858ddedd7f9b6a98c6c2ed5ed8ec6163b6efc68e571367b8e"], &(0x7f0000000040)=0x61)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee7, 0x4000084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newchain={0x78, 0x64, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0x1}, {0xc, 0xc}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x92}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="dc0100001700754726bd7000fbdbdf25ac1414bb000000000000000000000000000004d23c000000ff010000000000000000000000000001e000000100000000000000e1560000000a0101000000000000000000000000004e20be534e2400000a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ff0100000000000000000000000000014e2200084e23000302008020b4000000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x881}, 0x40200c1)

11:50:26 executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10)
remap_file_pages(&(0x7f0000582000/0x3000)=nil, 0x3000, 0x0, 0x9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

11:50:26 executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10)
remap_file_pages(&(0x7f0000582000/0x3000)=nil, 0x3000, 0x0, 0x9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

11:50:26 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

11:50:26 executing program 4:
r0 = syz_clone(0x0, 0x0, 0xfffffffffffffe41, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = pidfd_open(r0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = dup3(r3, r4, 0x0)
setns(r5, 0x10000000)

11:50:26 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, &(0x7f00000000c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000e2000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)
dup(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x78, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x0, 0x0, 0xb3550aa4ba878394, 0x0, 0x5}, 0x9c)

11:50:26 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

11:50:26 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

[ 3418.526230][ T1816] loop0: detected capacity change from 0 to 1036
11:50:26 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

[ 3418.742719][T31385] I/O error, dev loop0, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 3418.753685][T31385] Buffer I/O error on dev loop0, logical block 32, lost async page write
[ 3418.771954][T31385] I/O error, dev loop0, sector 264 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 3418.782392][T31385] Buffer I/O error on dev loop0, logical block 33, lost async page write
[ 3418.793368][T31385] I/O error, dev loop0, sector 272 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 3418.803831][T31385] Buffer I/O error on dev loop0, logical block 34, lost async page write
[ 3418.812900][T31385] I/O error, dev loop0, sector 280 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 3418.822756][T31385] Buffer I/O error on dev loop0, logical block 35, lost async page write
[ 3418.831253][T31385] I/O error, dev loop0, sector 288 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 3418.841059][T31385] Buffer I/O error on dev loop0, logical block 36, lost async page write
[ 3418.849682][T31385] I/O error, dev loop0, sector 296 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 3418.859376][T31385] Buffer I/O error on dev loop0, logical block 37, lost async page write
11:50:27 executing program 4:
r0 = syz_clone(0x0, 0x0, 0xfffffffffffffe41, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = pidfd_open(r0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = dup3(r3, r4, 0x0)
setns(r5, 0x10000000)

[ 3418.907108][ T1821] I/O error, dev loop0, sector 304 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 3418.922655][ T1821] Buffer I/O error on dev loop0, logical block 38, lost async page write
11:50:27 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

11:50:27 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

11:50:27 executing program 4:
r0 = syz_clone(0x0, 0x0, 0xfffffffffffffe41, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = pidfd_open(r0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = dup3(r3, r4, 0x0)
setns(r5, 0x10000000)

11:50:27 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

11:50:27 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

11:50:27 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

11:50:27 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

11:50:27 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[ 3419.533108][ T1842] loop0: detected capacity change from 0 to 1036
11:50:27 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

11:50:28 executing program 0:
syz_80211_inject_frame(&(0x7f0000001380), &(0x7f00000013c0)=@mgmt_frame=@deauth={@with_ht={{{}, {}, @device_a, @device_a, @random="4502667bc1f3"}}, 0x0, @val={0x8c, 0x18, {0x0, "db72007c54b2", @long="6bd92ea26f9ba5ba83e64b8b60932db6"}}}, 0x38)

[ 3419.735876][ T1842] I/O error, dev loop0, sector 520 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2
11:50:28 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

[ 3419.790065][ T1861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:50:28 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

11:50:28 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

11:50:28 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0)

[ 3420.079406][ T1875] loop0: detected capacity change from 0 to 1036
[ 3420.211919][ T1875] I/O error, dev loop0, sector 968 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 3420.277327][ T1875] Buffer I/O error on dev loop0, logical block 121, lost async page write
11:50:28 executing program 0:
syz_80211_inject_frame(&(0x7f0000001380), &(0x7f00000013c0)=@mgmt_frame=@deauth={@with_ht={{{}, {}, @device_a, @device_a, @random="4502667bc1f3"}}, 0x0, @val={0x8c, 0x18, {0x0, "db72007c54b2", @long="6bd92ea26f9ba5ba83e64b8b60932db6"}}}, 0x38)

11:50:28 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

11:50:28 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fcd846404c05c3064e4f010203010902240001000000000904000002ad16370009050102ff0300000009058802"], 0x0)

11:50:28 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f490cf3b64acf3"}, 0x10}}, 0x0)

[ 3420.337938][ T1875] I/O error, dev loop0, sector 960 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
11:50:28 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[ 3420.387099][ T1886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3420.456264][ T1875] Buffer I/O error on dev loop0, logical block 120, lost async page write
[ 3420.487169][ T1875] Buffer I/O error on dev loop0, logical block 119, lost async page write
11:50:29 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

11:50:29 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f490cf3b64acf3"}, 0x10}}, 0x0)

11:50:29 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382)
r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0)
unshare(0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='?', 0x1}], 0x1, 0x81808, 0x0)
unshare(0x10280)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r2 = socket$inet(0x2, 0x0, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00006cdffb), 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_proto_private(0xffffffffffffffff, 0x8948, &(0x7f0000000000))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0)
unshare(0x14000800)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[ 3420.682470][T17698] usb 2-1: new high-speed USB device number 34 using dummy_hcd
11:50:29 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket(0x2, 0xa, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20000000)

11:50:29 executing program 0:
syz_80211_inject_frame(&(0x7f0000001380), &(0x7f00000013c0)=@mgmt_frame=@deauth={@with_ht={{{}, {}, @device_a, @device_a, @random="4502667bc1f3"}}, 0x0, @val={0x8c, 0x18, {0x0, "db72007c54b2", @long="6bd92ea26f9ba5ba83e64b8b60932db6"}}}, 0x38)

[ 3420.793914][ T1904] loop0: detected capacity change from 0 to 1036
[ 3420.933918][ T1916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:50:29 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f490cf3b64acf3"}, 0x10}}, 0x0)

11:50:29 executing program 5:
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x3}, 0x8, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x9, "fa02c80a3a1e9d4b9aafcc9668cf8d674fe69b5b7638dd031dd7524fe5809639", <r2=>0xffffffffffffffff})
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}, {r3, 0x40}], 0x2, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 3421.062575][T17698] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[ 3421.088674][T17698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
11:50:29 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket(0x2, 0xa, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20000000)

[ 3421.134519][T17698] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
11:50:29 executing program 5:
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x3}, 0x8, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x9, "fa02c80a3a1e9d4b9aafcc9668cf8d674fe69b5b7638dd031dd7524fe5809639", <r2=>0xffffffffffffffff})
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}, {r3, 0x40}], 0x2, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 3421.342657][T17698] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=4f.4e
[ 3421.364757][T17698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3421.389825][T17698] usb 2-1: Product: syz
[ 3421.398874][T17698] usb 2-1: Manufacturer: syz
[ 3421.410521][T17698] usb 2-1: SerialNumber: syz
[ 3421.431638][T17698] usb 2-1: config 0 descriptor??
[ 3421.452477][ T1888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 3421.492304][T17698] port100 2-1:0.0: NFC: Could not get supported command types
[ 3421.694098][T17698] usb 2-1: USB disconnect, device number 34
11:50:30 executing program 5:
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x3}, 0x8, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x9, "fa02c80a3a1e9d4b9aafcc9668cf8d674fe69b5b7638dd031dd7524fe5809639", <r2=>0xffffffffffffffff})
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}, {r3, 0x40}], 0x2, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11:50:30 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket(0x2, 0xa, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20000000)

11:50:30 executing program 0:
syz_80211_inject_frame(&(0x7f0000001380), &(0x7f00000013c0)=@mgmt_frame=@deauth={@with_ht={{{}, {}, @device_a, @device_a, @random="4502667bc1f3"}}, 0x0, @val={0x8c, 0x18, {0x0, "db72007c54b2", @long="6bd92ea26f9ba5ba83e64b8b60932db6"}}}, 0x38)

11:50:30 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{}, 0x0, 0x0, 0x0, 0x0, "46f490cf3b64acf3"}, 0x10}}, 0x0)

11:50:30 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket(0x2, 0xa, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20000000)

11:50:30 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fcd846404c05c3064e4f010203010902240001000000000904000002ad16370009050102ff0300000009058802"], 0x0)

11:50:30 executing program 5:
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x3}, 0x8, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x9, "fa02c80a3a1e9d4b9aafcc9668cf8d674fe69b5b7638dd031dd7524fe5809639", <r2=>0xffffffffffffffff})
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000280)=[{r2}, {r3, 0x40}], 0x2, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 3422.263604][ T1938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:50:30 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)

11:50:30 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340)="4fc22a705110d094d1520ff4824adf3d3f10035ba6a28e75080dbf1df8ef34deb52fcce7da990731d6e19b06ddb2d693a2d772c918fc269ae37d22ae171d7b9f639d2d9ef3503a8431930ad32c1238c55ea52b2ca0def4e6c7c6a879035a4c9020cc916c9c617cd9b4df7f8ff41c63a3b6c1f07b114af67af09aede0895cf0f8b264dfe72838c8543c73e29bb9fe2aedeb25707d45f5ee000000000000000018222a9e2ec5875c53bce2b27cba61dac70c1e7850af4f0da9b9fe789f6e1ad04ab4789625ab02d51e2ef9d4e9e5b6a01810d0bda3c826b26c1752e5554c0008ab18330fc2cafaf47720e5f13386f5bed4556c9ba78dcbb0929f2aa3ab0e8d862e4b41fb8be27c004ac2cd27489354ab906b8e00af57abc3909b1db3a11969de89a8f14ae9a11508d58e0c20553fe2b6221e07616398b0ac912397b8bb0a20ffa493d3a8f799244108d6e802e76dafb34793a3784f33f0abdd2b8e99faff99f946ae1876f5dce3ba080a3703fcfbdcfdbb49af59ff1996e304a080a622b4a5f17fe75c300ef4d50dedb0d0a422", 0x7fc3ad37)
mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x4094032, 0xffffffffffffffff, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

11:50:30 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)

11:50:30 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)

11:50:30 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket(0x2, 0xa, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20000000)

11:50:31 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)

[ 3422.572333][T17698] usb 2-1: new high-speed USB device number 35 using dummy_hcd
11:50:31 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket(0x2, 0xa, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20000000)

11:50:31 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1015})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3)

11:50:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(r1, r2, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e13, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000000000700000044241703e0000002000000009b1e0001000000000a01010200000000ac1414bb0000000000000000"], 0x38}}], 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0))
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180), 0x4)
sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r5, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettfilter={0x24, 0x1a, 0x70b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x900}}}, 0x24}}, 0x0)

11:50:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(r1, r2, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e13, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000000000700000044241703e0000002000000009b1e0001000000000a01010200000000ac1414bb0000000000000000"], 0x38}}], 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0))
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180), 0x4)
sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r5, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettfilter={0x24, 0x1a, 0x70b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x900}}}, 0x24}}, 0x0)

[ 3422.959137][T17698] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[ 3422.981949][T17698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 3423.012113][T17698] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[ 3423.192708][T17698] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=4f.4e
[ 3423.201960][T17698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3423.220352][T17698] usb 2-1: Product: syz
[ 3423.226331][T17698] usb 2-1: Manufacturer: syz
[ 3423.241133][T17698] usb 2-1: SerialNumber: syz
[ 3423.247485][T17698] usb 2-1: config 0 descriptor??
[ 3423.272499][ T1942] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 3423.312330][T17698] port100 2-1:0.0: NFC: Could not get supported command types
[ 3423.526926][T17698] usb 2-1: USB disconnect, device number 35
11:50:32 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fcd846404c05c3064e4f010203010902240001000000000904000002ad16370009050102ff0300000009058802"], 0x0)

11:50:32 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1015})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3)

11:50:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(r1, r2, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e13, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000000000700000044241703e0000002000000009b1e0001000000000a01010200000000ac1414bb0000000000000000"], 0x38}}], 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0))
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180), 0x4)
sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r5, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettfilter={0x24, 0x1a, 0x70b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x900}}}, 0x24}}, 0x0)

11:50:32 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket(0x2, 0xa, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20000000)

11:50:32 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

11:50:32 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340)="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", 0x7fc3ad37)
mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x4094032, 0xffffffffffffffff, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

11:50:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(r1, r2, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e13, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000000000700000044241703e0000002000000009b1e0001000000000a01010200000000ac1414bb0000000000000000"], 0x38}}], 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0))
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180), 0x4)
sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r5, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettfilter={0x24, 0x1a, 0x70b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x900}}}, 0x24}}, 0x0)

11:50:32 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1015})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3)

11:50:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x7400000000000000}, 0x0)

11:50:32 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1015})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3)

[ 3424.412355][T15562] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 3424.420847][ T1993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
11:50:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x7400000000000000}, 0x0)

11:50:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x7400000000000000}, 0x0)

[ 3424.633382][ T1997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3424.816007][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3424.842810][T15562] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[ 3424.876182][T15562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 3424.897861][T15562] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[ 3425.072352][T15562] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=4f.4e
[ 3425.081450][T15562] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3425.089756][T15562] usb 2-1: Product: syz
[ 3425.094509][T15562] usb 2-1: Manufacturer: syz
[ 3425.099230][T15562] usb 2-1: SerialNumber: syz
[ 3425.116971][T15562] usb 2-1: config 0 descriptor??
[ 3425.142618][ T1981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 3425.192672][T15562] port100 2-1:0.0: NFC: Could not get supported command types
[ 3425.399884][T15562] usb 2-1: USB disconnect, device number 36
11:50:34 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fcd846404c05c3064e4f010203010902240001000000000904000002ad16370009050102ff0300000009058802"], 0x0)

11:50:34 executing program 0:
capset(&(0x7f0000002340)={0x20080522}, &(0x7f0000002380))
setgroups(0x0, 0x0)

11:50:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x7400000000000000}, 0x0)

11:50:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x7400000000000000}, 0x0)

11:50:34 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340)="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", 0x7fc3ad37)
mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x4094032, 0xffffffffffffffff, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

11:50:34 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

11:50:34 executing program 0:
capset(&(0x7f0000002340)={0x20080522}, &(0x7f0000002380))
setgroups(0x0, 0x0)

[ 3425.976397][ T2011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3425.995227][ T2012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
11:50:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x7400000000000000}, 0x0)

11:50:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x7400000000000000}, 0x0)

11:50:34 executing program 0:
capset(&(0x7f0000002340)={0x20080522}, &(0x7f0000002380))
setgroups(0x0, 0x0)

[ 3426.179968][ T2023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3426.213178][ T2025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
11:50:34 executing program 0:
capset(&(0x7f0000002340)={0x20080522}, &(0x7f0000002380))
setgroups(0x0, 0x0)

11:50:34 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

[ 3426.352592][T30502] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 3426.752553][T30502] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[ 3426.763133][T30502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 3426.773456][T30502] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[ 3426.962688][T30502] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=4f.4e
[ 3426.979308][T30502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3426.992363][T30502] usb 2-1: Product: syz
[ 3426.996627][T30502] usb 2-1: Manufacturer: syz
[ 3427.001406][T30502] usb 2-1: SerialNumber: syz
[ 3427.022348][T30502] usb 2-1: config 0 descriptor??
[ 3427.053633][ T2016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 3427.112865][T30502] port100 2-1:0.0: NFC: Could not get supported command types
[ 3427.322955][T17698] usb 2-1: USB disconnect, device number 37
11:50:36 executing program 0:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile64(r0, r1, &(0x7f00000000c0)=0xfffffffffffffff8, 0x0)

11:50:36 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

11:50:36 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340)="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", 0x7fc3ad37)
mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x4094032, 0xffffffffffffffff, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

11:50:36 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

11:50:36 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

11:50:36 executing program 0:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile64(r0, r1, &(0x7f00000000c0)=0xfffffffffffffff8, 0x0)

11:50:36 executing program 1:
pselect6(0xa1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)

11:50:36 executing program 0:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile64(r0, r1, &(0x7f00000000c0)=0xfffffffffffffff8, 0x0)

11:50:36 executing program 0:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile64(r0, r1, &(0x7f00000000c0)=0xfffffffffffffff8, 0x0)

11:50:36 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000000c0)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x24, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0})

11:50:37 executing program 5:
r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

11:50:37 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x112})

11:50:37 executing program 5:
r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

11:50:37 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

11:50:37 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x112})

[ 3429.022235][T17698] usb 1-1: new high-speed USB device number 36 using dummy_hcd
11:50:37 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

11:50:37 executing program 5:
r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

11:50:37 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x112})

11:50:37 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

11:50:37 executing program 5:
r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

11:50:37 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x112})

[ 3429.382665][T17698] usb 1-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11
[ 3429.427056][T17698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3429.484335][T17698] usb 1-1: config 0 descriptor??
[ 3429.543703][T17698] gspca_main: cpia1-2.14.0 probing 0553:0002
[ 3429.982439][T17698] cpia1 1-1:0.0: unexpected state after lo power cmd: 01
[ 3431.962318][T17698] cpia1 1-1:0.0: unexpected state after hi power cmd: 02
[ 3431.969603][T17698] cpia1: probe of 1-1:0.0 failed with error -5
[ 3432.171232][T17698] usb 1-1: USB disconnect, device number 36
11:50:41 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000000c0)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x24, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0})

11:50:41 executing program 5:
unshare(0x42000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0\x00'}]}]}, 0x60}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x2, 0x30}]}}}]}, 0x3c}}, 0x0)

11:50:41 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
madvise(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x14)
mlock2(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

11:50:41 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0)

11:50:41 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
ftruncate(0xffffffffffffffff, 0x6)
r4 = dup(r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000004c082, 0x0)
dup(0xffffffffffffffff)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
r6 = dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64])
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x111402, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendfile(r5, r4, 0x0, 0x80006)

11:50:41 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = dup(r0)
rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f00000002c0)="c4e2c992548201d37ff2f2438395ff1f965a00c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef37c6467f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000680)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$P9_RSTATFS(r1, 0x0, 0x0)

11:50:41 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0)

11:50:41 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = dup(r0)
rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f00000002c0)="c4e2c992548201d37ff2f2438395ff1f965a00c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef37c6467f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000680)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$P9_RSTATFS(r1, 0x0, 0x0)

11:50:41 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
madvise(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x14)
mlock2(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

11:50:41 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0)

11:50:41 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = dup(r0)
rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f00000002c0)="c4e2c992548201d37ff2f2438395ff1f965a00c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef37c6467f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000680)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$P9_RSTATFS(r1, 0x0, 0x0)

11:50:41 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0)

[ 3433.052346][T17698] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 3433.432375][T17698] usb 1-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11
[ 3433.448105][T17698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3433.485287][T17698] usb 1-1: config 0 descriptor??
[ 3433.546223][T17698] gspca_main: cpia1-2.14.0 probing 0553:0002
[ 3433.992279][T17698] cpia1 1-1:0.0: unexpected state after lo power cmd: 01
[ 3435.972320][T17698] cpia1 1-1:0.0: unexpected state after hi power cmd: 02
[ 3435.979455][T17698] cpia1: probe of 1-1:0.0 failed with error -5
[ 3436.193077][T17698] usb 1-1: USB disconnect, device number 37
11:50:45 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000000c0)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x24, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0})

11:50:45 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
madvise(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x14)
mlock2(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

11:50:45 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = dup(r0)
rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f00000002c0)="c4e2c992548201d37ff2f2438395ff1f965a00c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef37c6467f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000680)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$P9_RSTATFS(r1, 0x0, 0x0)

11:50:45 executing program 5:
unshare(0x42000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0\x00'}]}]}, 0x60}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x2, 0x30}]}}}]}, 0x3c}}, 0x0)

11:50:45 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000000c0)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x24, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0})

11:50:45 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
madvise(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x14)
mlock2(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

11:50:45 executing program 3:
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000057c0), 0x2)
syz_usbip_server_init(0x0)

11:50:45 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
madvise(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x14)
mlock2(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

11:50:45 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
madvise(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x14)
mlock2(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

[ 3436.892675][ T2147] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
11:50:45 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xbe8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11:50:45 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
madvise(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x14)
mlock2(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

[ 3437.082805][T30502] usb 3-1: new high-speed USB device number 36 using dummy_hcd
11:50:45 executing program 5:
unshare(0x42000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0\x00'}]}]}, 0x60}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x2, 0x30}]}}}]}, 0x3c}}, 0x0)

[ 3437.152524][T15562] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 3437.342576][T30500] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 3437.462558][T30502] usb 3-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11
[ 3437.471909][T30502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3437.496539][T30502] usb 3-1: config 0 descriptor??
[ 3437.552723][T15562] usb 1-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11
[ 3437.561823][T15562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3437.571913][T30502] gspca_main: cpia1-2.14.0 probing 0553:0002
[ 3437.596316][T15562] usb 1-1: config 0 descriptor??
[ 3437.643198][T15562] gspca_main: cpia1-2.14.0 probing 0553:0002
[ 3437.751453][T30500] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3437.781735][T30500] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3438.002304][T30502] cpia1 3-1:0.0: unexpected state after lo power cmd: 01
[ 3438.062782][T15562] cpia1 1-1:0.0: unexpected state after lo power cmd: 01
[ 3438.070158][T30500] usb 5-1: string descriptor 0 read error: -22
[ 3438.092968][T30500] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40
[ 3438.103589][T30500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3438.472737][T30500] usbhid 5-1:1.0: can't add hid device: -71
[ 3438.478814][T30500] usbhid: probe of 5-1:1.0 failed with error -71
[ 3438.509004][T30500] usb 5-1: USB disconnect, device number 14
[ 3439.932973][T30502] cpia1 3-1:0.0: unexpected state after hi power cmd: 02
[ 3439.940296][T30502] cpia1: probe of 3-1:0.0 failed with error -5
[ 3440.022485][T15562] cpia1 1-1:0.0: unexpected state after hi power cmd: 02
[ 3440.029917][T15562] cpia1: probe of 1-1:0.0 failed with error -5
[ 3440.157710][ T9911] usb 3-1: USB disconnect, device number 36
[ 3440.262716][T17698] usb 1-1: USB disconnect, device number 38
11:50:49 executing program 5:
unshare(0x42000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0\x00'}]}]}, 0x60}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x2, 0x30}]}}}]}, 0x3c}}, 0x0)

11:50:49 executing program 1:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x414082, 0x0)

11:50:49 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

11:50:49 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xbe8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11:50:49 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000000c0)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x24, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0})

11:50:49 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000000c0)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x24, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0})

11:50:49 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

11:50:49 executing program 1:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x414082, 0x0)

11:50:49 executing program 1:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x414082, 0x0)

11:50:49 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

11:50:49 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1)

11:50:49 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xbe8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[ 3441.102737][T15562] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 3441.122216][T30502] usb 3-1: new high-speed USB device number 37 using dummy_hcd
11:50:49 executing program 1:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x414082, 0x0)

11:50:49 executing program 3:
keyctl$set_reqkey_keyring(0x6, 0xf8ffffff)

11:50:49 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0x94}]})

[ 3441.172683][T29806] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 3441.442719][T29975] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 3441.482819][T15562] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3441.495427][T15562] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3441.506490][T30502] usb 3-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11
[ 3441.516475][T30502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3441.530291][T30502] usb 3-1: config 0 descriptor??
[ 3441.542364][T29806] usb 1-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11
[ 3441.552974][T29806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3441.571613][T29806] usb 1-1: config 0 descriptor??
[ 3441.579182][T30502] gspca_main: cpia1-2.14.0 probing 0553:0002
[ 3441.624363][T29806] gspca_main: cpia1-2.14.0 probing 0553:0002
[ 3441.752342][T15562] usb 5-1: string descriptor 0 read error: -22
[ 3441.758672][T15562] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40
[ 3441.792768][T15562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3441.822824][T29975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3441.842459][T29975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3442.023177][T30502] cpia1 3-1:0.0: unexpected state after lo power cmd: 01
[ 3442.063125][T29806] cpia1 1-1:0.0: unexpected state after lo power cmd: 01
[ 3442.132797][T29975] usb 6-1: string descriptor 0 read error: -22
[ 3442.139128][T29975] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40
[ 3442.161478][T29975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3442.182918][T15562] usbhid 5-1:1.0: can't add hid device: -71
[ 3442.189265][T15562] usbhid: probe of 5-1:1.0 failed with error -71
[ 3442.213339][T15562] usb 5-1: USB disconnect, device number 15
11:50:51 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0x94}]})

[ 3442.552850][T29975] usbhid 6-1:1.0: can't add hid device: -71
[ 3442.559166][T29975] usbhid: probe of 6-1:1.0 failed with error -71
[ 3442.581631][T29975] usb 6-1: USB disconnect, device number 22
[ 3443.982494][T30502] cpia1 3-1:0.0: unexpected state after hi power cmd: 02
[ 3443.990658][T30502] cpia1: probe of 3-1:0.0 failed with error -5
[ 3444.012427][T29806] cpia1 1-1:0.0: unexpected state after hi power cmd: 02
[ 3444.019721][T29806] cpia1: probe of 1-1:0.0 failed with error -5
[ 3444.205396][T29806] usb 3-1: USB disconnect, device number 37
[ 3444.241536][T30502] usb 1-1: USB disconnect, device number 39
11:50:53 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000000c0)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x24, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0})

11:50:53 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xbe8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11:50:53 executing program 3:
keyctl$set_reqkey_keyring(0x6, 0xf8ffffff)

11:50:53 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0x94}]})

11:50:53 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xbe8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11:50:53 executing program 3:
keyctl$set_reqkey_keyring(0x6, 0xf8ffffff)

11:50:53 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0x94}]})

11:50:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x2, 0x70, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)

11:50:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x2, 0x70, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)

11:50:53 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}, @TCA_NETEM_RATE64={0x49}, @TCA_NETEM_RATE={0x57}]}}}, @TCA_INGRESS_BLOCK, @TCA_RATE, @qdisc_kind_options=@q_pfifo_head_drop]}, 0x88}}, 0x0)

11:50:53 executing program 3:
keyctl$set_reqkey_keyring(0x6, 0xf8ffffff)

11:50:53 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x7fffffff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="961c0250b57fac0822976099ee324b640000002900", @ANYRESOCT, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)

[ 3445.022302][T17697] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 3445.022795][ T2231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3445.072693][T17698] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 3445.080157][ T2236] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3445.090507][ T2236] netem: incorrect gi model size
[ 3445.102292][ T9910] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 3445.110529][ T2236] netem: change failed
[ 3445.177363][ T2238] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 3445.392602][T17697] usb 3-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11
[ 3445.401790][T17697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3445.421067][T17697] usb 3-1: config 0 descriptor??
[ 3445.442470][T17698] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3445.464161][T17697] gspca_main: cpia1-2.14.0 probing 0553:0002
[ 3445.470420][T17698] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3445.492413][ T9910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3445.503811][ T9910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3445.722369][T17698] usb 6-1: string descriptor 0 read error: -22
[ 3445.728646][T17698] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40
[ 3445.738808][T17698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3445.754378][ T9910] usb 5-1: string descriptor 0 read error: -22
[ 3445.760743][ T9910] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40
[ 3445.776032][ T9910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3445.902442][T17697] cpia1 3-1:0.0: unexpected state after lo power cmd: 01
[ 3446.112202][T17698] usbhid 6-1:1.0: can't add hid device: -71
[ 3446.118342][T17698] usbhid: probe of 6-1:1.0 failed with error -71
[ 3446.125587][ T9910] usbhid 5-1:1.0: can't add hid device: -71
[ 3446.132368][ T9910] usbhid: probe of 5-1:1.0 failed with error -71
[ 3446.141336][T17698] usb 6-1: USB disconnect, device number 23
[ 3446.149676][ T9910] usb 5-1: USB disconnect, device number 16
[ 3447.882552][T17697] cpia1 3-1:0.0: unexpected state after hi power cmd: 02
[ 3447.890917][T17697] cpia1: probe of 3-1:0.0 failed with error -5
[ 3448.099555][T17697] usb 3-1: USB disconnect, device number 38
11:50:57 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}, @TCA_NETEM_RATE64={0x49}, @TCA_NETEM_RATE={0x57}]}}}, @TCA_INGRESS_BLOCK, @TCA_RATE, @qdisc_kind_options=@q_pfifo_head_drop]}, 0x88}}, 0x0)

11:50:57 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x2, 0x70, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)

11:50:57 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x7fffffff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="961c0250b57fac0822976099ee324b640000002900", @ANYRESOCT, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)

11:50:57 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xbe8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11:50:57 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xbe8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11:50:57 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}, @TCA_NETEM_RATE64={0x49}, @TCA_NETEM_RATE={0x57}]}}}, @TCA_INGRESS_BLOCK, @TCA_RATE, @qdisc_kind_options=@q_pfifo_head_drop]}, 0x88}}, 0x0)

[ 3448.679374][ T2247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
11:50:57 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}, @TCA_NETEM_RATE64={0x49}, @TCA_NETEM_RATE={0x57}]}}}, @TCA_INGRESS_BLOCK, @TCA_RATE, @qdisc_kind_options=@q_pfifo_head_drop]}, 0x88}}, 0x0)

11:50:57 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x2, 0x70, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)

[ 3448.742425][ T2247] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3448.751841][ T2247] netem: incorrect gi model size
[ 3448.757745][ T2247] netem: change failed
[ 3448.773204][ T2255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3448.809011][ T2257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3448.833208][ T2250] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
11:50:57 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}, @TCA_NETEM_RATE64={0x49}, @TCA_NETEM_RATE={0x57}]}}}, @TCA_INGRESS_BLOCK, @TCA_RATE, @qdisc_kind_options=@q_pfifo_head_drop]}, 0x88}}, 0x0)

[ 3448.871038][ T2255] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3448.887935][ T2255] netem: incorrect gi model size
[ 3448.893222][ T2255] netem: change failed
[ 3448.953188][T17698] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 3448.961496][T17697] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 3448.961963][ T2257] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
11:50:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x2000, &(0x7f0000000000)=[{}]})

[ 3449.016062][ T2257] netem: incorrect gi model size
[ 3449.021249][ T2257] netem: change failed
[ 3449.027070][ T2263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
11:50:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x2000, &(0x7f0000000000)=[{}]})

[ 3449.111215][ T2273] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3449.130507][ T2273] netem: incorrect gi model size
[ 3449.140701][ T2273] netem: change failed
11:50:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x2000, &(0x7f0000000000)=[{}]})

11:50:57 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}, @TCA_NETEM_RATE64={0x49}, @TCA_NETEM_RATE={0x57}]}}}, @TCA_INGRESS_BLOCK, @TCA_RATE, @qdisc_kind_options=@q_pfifo_head_drop]}, 0x88}}, 0x0)

11:50:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x2000, &(0x7f0000000000)=[{}]})

[ 3449.312434][T17698] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3449.342604][T17697] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3449.376738][T17697] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3449.387105][T17698] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
11:50:57 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x7fffffff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="961c0250b57fac0822976099ee324b640000002900", @ANYRESOCT, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)

[ 3449.486628][ T2281] netem: incorrect gi model size
[ 3449.491797][ T2281] netem: change failed
[ 3449.596843][ T2283] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 3449.682580][T17697] usb 5-1: string descriptor 0 read error: -22
[ 3449.689757][T17697] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40
[ 3449.701235][T17698] usb 6-1: string descriptor 0 read error: -22
[ 3449.716387][T17698] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40
[ 3449.742959][T17698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3449.751077][T17697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3450.102392][T17698] usbhid 6-1:1.0: can't add hid device: -71
[ 3450.108471][T17698] usbhid: probe of 6-1:1.0 failed with error -71
[ 3450.115644][T17697] usbhid 5-1:1.0: can't add hid device: -71
[ 3450.121654][T17697] usbhid: probe of 5-1:1.0 failed with error -71
[ 3450.139283][T17697] usb 5-1: USB disconnect, device number 17
[ 3450.145929][T17698] usb 6-1: USB disconnect, device number 24
11:50:58 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f00000005c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x2, 0x0)

11:50:58 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x400000, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0), 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)

11:50:59 executing program 5:
socket$l2tp6(0xa, 0x2, 0x73)

11:50:59 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x7fffffff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="961c0250b57fac0822976099ee324b640000002900", @ANYRESOCT, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)

11:50:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x4}]}, @TCA_NETEM_RATE64={0x49}, @TCA_NETEM_RATE={0x57}]}}}, @TCA_INGRESS_BLOCK, @TCA_RATE, @qdisc_kind_options=@q_pfifo_head_drop]}, 0x88}}, 0x0)

11:50:59 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
io_setup(0x9, &(0x7f0000000040)=<r1=>0x0)
r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

11:50:59 executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0xb3, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xe2, 0x84, 0x6b}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x5, 0xc8}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x95, 0x1, 0x5, 0x10, 0x1}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x69, 0x1, 0x200}]}, 0x9, [{0x5e, &(0x7f00000000c0)=@string={0x5e, 0x3, "18334da872672b84682e2da8304948792a84ab5b9672756c1d04c161810bc32d860240be6be2d20c6f3f8f5e73c65ffafec75d595e57ffe656cbe074cedaec3547a38bf1757504448b258e977a9b62010b0b8bffdb452eada09f73ca"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xdc, &(0x7f00000001c0)=@string={0xdc, 0x3, "e43c3f647e3d4911ddc936f1533f04e1058222a2e7a636bf1b19355a80323db8d237eb1505e143821db3c4936126111a28c1dd6b57e16b70b840b5298ef806e4632693d36ad3cc661288a4df356fec64dd55d97f9eb397a170bc9dcec780f428f6473f4a2ec655007a423f7f49961bdfaeca568279bf3eea6b9420b17d58b155f72f6fae949ae031f7305fb8ca70285584e4ad5cf7def271daf7c940c1d93a77f053f9452702e4b2645e0c9ad2ad3f7ad175db18c8d47d1099880d04abbd8502747c6e6ced44080919606ee5bb3b5f848e3508fc358365f48847"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x65, &(0x7f0000000300)=@string={0x65, 0x3, "d15026af4143e68c2b131b7a7070ce3f61ba5dfd01bafc396f513a71de139576894d0dff74e57f4dc3afdb75d3494c1302f41ad1476e85ef0cf4e8662a0091e9cfbc04cd34be1a0b3f476a43da1c7f597f1a7f3a27fa33e3fa42ea3ecd8fcbb91f7c4e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}, {0x7b, &(0x7f00000003c0)=@string={0x7b, 0x3, "9251ef4e925eb751a6d6d4ef7686878266ca3e7ef79a8559dfa1113aa7bedcca9e0488763f87d27e8a54923ecfeb055e00a93a23106cddf16f385639794e0b86a6364c79f4f3af612d0525bb9e3a47932712e08e4e7498a6a46538c7b28ce67a1024321f30e4b2d80b4cf0648196ae4a06c28c750d543af28c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}]})
syz_usb_ep_read(r0, 0x6, 0xffe, &(0x7f0000000540)=""/4094)

11:50:59 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12)
write$cgroup_int(r1, &(0x7f0000000100), 0x12)
write$cgroup_int(r1, &(0x7f0000000180)=0xfffffffffffffffb, 0x12)

[ 3450.649611][ T2298] __nla_validate_parse: 2 callbacks suppressed
[ 3450.649627][ T2298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
11:50:59 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
io_setup(0x9, &(0x7f0000000040)=<r1=>0x0)
r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

[ 3450.793736][ T1216] ieee802154 phy0 wpan0: encryption failed: -22
[ 3450.801100][ T1216] ieee802154 phy1 wpan1: encryption failed: -22
[ 3450.825147][ T2312] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
11:50:59 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12)
write$cgroup_int(r1, &(0x7f0000000100), 0x12)
write$cgroup_int(r1, &(0x7f0000000180)=0xfffffffffffffffb, 0x12)

11:50:59 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
io_setup(0x9, &(0x7f0000000040)=<r1=>0x0)
r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

[ 3450.882407][ T2312] netem: incorrect gi model size
[ 3450.901037][ T2312] netem: change failed
11:50:59 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12)
write$cgroup_int(r1, &(0x7f0000000100), 0x12)
write$cgroup_int(r1, &(0x7f0000000180)=0xfffffffffffffffb, 0x12)

11:50:59 executing program 2:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3451.102235][T17698] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[ 3451.472594][T17698] usb 1-1: config 1 interface 0 altsetting 179 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 3451.501250][T17698] usb 1-1: config 1 interface 0 has no altsetting 0
[ 3451.672456][T17698] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3451.681901][T17698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3451.721962][T17698] usb 1-1: Manufacturer: ѕ
[ 3451.727058][T17698] usb 1-1: SerialNumber: 㳤搿㵾ᅉ짝㽓舅ꈢꛧ뼶ᤛ娵㊀렽㟒ᗫ艃댝鏄♡ᨑ섨毝火䂸⦵♣펓퍪曌蠒漵擬嗝翙뎞ꆗ뱰캝胇⣴䟶䨿옮U䉺缿陉쪮艖뽹鑫넠塽喱⿷깯骔㇠ヷ롟烊唨岭燲䃉眺台䗹ȧ다幤騌귒稿痑ᣛ퓈ၽ袙Ѝ붫ʅ籴汮䓭ई怙㮻葟㖎ﰈ茵䞈
[ 3451.782657][ T2324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
11:51:00 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:00 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12)
write$cgroup_int(r1, &(0x7f0000000100), 0x12)
write$cgroup_int(r1, &(0x7f0000000180)=0xfffffffffffffffb, 0x12)

11:51:00 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
io_setup(0x9, &(0x7f0000000040)=<r1=>0x0)
r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

11:51:00 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12)
write$cgroup_int(r1, &(0x7f0000000100), 0x12)
write$cgroup_int(r1, &(0x7f0000000180)=0xfffffffffffffffb, 0x12)

11:51:00 executing program 2:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3452.205722][T17698] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 179 proto 1 vid 0x0525 pid 0xA4A8
[ 3452.231995][T17698] usb 1-1: USB disconnect, device number 40
[ 3452.302740][T17698] usblp0: removed
11:51:01 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12)
write$cgroup_int(r1, &(0x7f0000000100), 0x12)
write$cgroup_int(r1, &(0x7f0000000180)=0xfffffffffffffffb, 0x12)

11:51:01 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12)
write$cgroup_int(r1, &(0x7f0000000100), 0x12)
write$cgroup_int(r1, &(0x7f0000000180)=0xfffffffffffffffb, 0x12)

11:51:01 executing program 4:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:01 executing program 2:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:01 executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0xb3, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xe2, 0x84, 0x6b}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x5, 0xc8}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x95, 0x1, 0x5, 0x10, 0x1}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x69, 0x1, 0x200}]}, 0x9, [{0x5e, &(0x7f00000000c0)=@string={0x5e, 0x3, "18334da872672b84682e2da8304948792a84ab5b9672756c1d04c161810bc32d860240be6be2d20c6f3f8f5e73c65ffafec75d595e57ffe656cbe074cedaec3547a38bf1757504448b258e977a9b62010b0b8bffdb452eada09f73ca"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xdc, &(0x7f00000001c0)=@string={0xdc, 0x3, "e43c3f647e3d4911ddc936f1533f04e1058222a2e7a636bf1b19355a80323db8d237eb1505e143821db3c4936126111a28c1dd6b57e16b70b840b5298ef806e4632693d36ad3cc661288a4df356fec64dd55d97f9eb397a170bc9dcec780f428f6473f4a2ec655007a423f7f49961bdfaeca568279bf3eea6b9420b17d58b155f72f6fae949ae031f7305fb8ca70285584e4ad5cf7def271daf7c940c1d93a77f053f9452702e4b2645e0c9ad2ad3f7ad175db18c8d47d1099880d04abbd8502747c6e6ced44080919606ee5bb3b5f848e3508fc358365f48847"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x65, &(0x7f0000000300)=@string={0x65, 0x3, "d15026af4143e68c2b131b7a7070ce3f61ba5dfd01bafc396f513a71de139576894d0dff74e57f4dc3afdb75d3494c1302f41ad1476e85ef0cf4e8662a0091e9cfbc04cd34be1a0b3f476a43da1c7f597f1a7f3a27fa33e3fa42ea3ecd8fcbb91f7c4e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}, {0x7b, &(0x7f00000003c0)=@string={0x7b, 0x3, "9251ef4e925eb751a6d6d4ef7686878266ca3e7ef79a8559dfa1113aa7bedcca9e0488763f87d27e8a54923ecfeb055e00a93a23106cddf16f385639794e0b86a6364c79f4f3af612d0525bb9e3a47932712e08e4e7498a6a46538c7b28ce67a1024321f30e4b2d80b4cf0648196ae4a06c28c750d543af28c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}]})
syz_usb_ep_read(r0, 0x6, 0xffe, &(0x7f0000000540)=""/4094)

11:51:01 executing program 3:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:01 executing program 5:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:01 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3453.002304][T17698] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[ 3453.372511][T17698] usb 1-1: config 1 interface 0 altsetting 179 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 3453.409520][T17698] usb 1-1: config 1 interface 0 has no altsetting 0
[ 3453.592464][T17698] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3453.612889][T17698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3453.645706][T17698] usb 1-1: Manufacturer: ѕ
[ 3453.663729][T17698] usb 1-1: SerialNumber: 㳤搿㵾ᅉ짝㽓舅ꈢꛧ뼶ᤛ娵㊀렽㟒ᗫ艃댝鏄♡ᨑ섨毝火䂸⦵♣펓퍪曌蠒漵擬嗝翙뎞ꆗ뱰캝胇⣴䟶䨿옮U䉺缿陉쪮艖뽹鑫넠塽喱⿷깯骔㇠ヷ롟烊唨岭燲䃉眺台䗹ȧ다幤騌귒稿痑ᣛ퓈ၽ袙Ѝ붫ʅ籴汮䓭ई怙㮻葟㖎ﰈ茵䞈
11:51:02 executing program 4:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3453.812622][ T2374] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
11:51:02 executing program 3:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:02 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:02 executing program 5:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:02 executing program 2:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3454.356081][T17698] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 179 proto 1 vid 0x0525 pid 0xA4A8
[ 3454.416081][T17698] usb 1-1: USB disconnect, device number 41
[ 3454.500965][T17698] usblp0: removed
11:51:03 executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0xb3, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xe2, 0x84, 0x6b}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x5, 0xc8}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x95, 0x1, 0x5, 0x10, 0x1}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x69, 0x1, 0x200}]}, 0x9, [{0x5e, &(0x7f00000000c0)=@string={0x5e, 0x3, "18334da872672b84682e2da8304948792a84ab5b9672756c1d04c161810bc32d860240be6be2d20c6f3f8f5e73c65ffafec75d595e57ffe656cbe074cedaec3547a38bf1757504448b258e977a9b62010b0b8bffdb452eada09f73ca"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xdc, &(0x7f00000001c0)=@string={0xdc, 0x3, "e43c3f647e3d4911ddc936f1533f04e1058222a2e7a636bf1b19355a80323db8d237eb1505e143821db3c4936126111a28c1dd6b57e16b70b840b5298ef806e4632693d36ad3cc661288a4df356fec64dd55d97f9eb397a170bc9dcec780f428f6473f4a2ec655007a423f7f49961bdfaeca568279bf3eea6b9420b17d58b155f72f6fae949ae031f7305fb8ca70285584e4ad5cf7def271daf7c940c1d93a77f053f9452702e4b2645e0c9ad2ad3f7ad175db18c8d47d1099880d04abbd8502747c6e6ced44080919606ee5bb3b5f848e3508fc358365f48847"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x65, &(0x7f0000000300)=@string={0x65, 0x3, "d15026af4143e68c2b131b7a7070ce3f61ba5dfd01bafc396f513a71de139576894d0dff74e57f4dc3afdb75d3494c1302f41ad1476e85ef0cf4e8662a0091e9cfbc04cd34be1a0b3f476a43da1c7f597f1a7f3a27fa33e3fa42ea3ecd8fcbb91f7c4e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}, {0x7b, &(0x7f00000003c0)=@string={0x7b, 0x3, "9251ef4e925eb751a6d6d4ef7686878266ca3e7ef79a8559dfa1113aa7bedcca9e0488763f87d27e8a54923ecfeb055e00a93a23106cddf16f385639794e0b86a6364c79f4f3af612d0525bb9e3a47932712e08e4e7498a6a46538c7b28ce67a1024321f30e4b2d80b4cf0648196ae4a06c28c750d543af28c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}]})
syz_usb_ep_read(r0, 0x6, 0xffe, &(0x7f0000000540)=""/4094)

[ 3455.312428][T17698] usb 1-1: new full-speed USB device number 42 using dummy_hcd
11:51:03 executing program 5:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:03 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:03 executing program 3:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:03 executing program 4:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x4b49, &(0x7f00000005c0)=0xfe)

[ 3455.682696][T17698] usb 1-1: config 1 interface 0 altsetting 179 has 2 endpoint descriptors, different from the interface descriptor's value: 1
11:51:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x4b49, &(0x7f00000005c0)=0xfe)

[ 3455.732150][T17698] usb 1-1: config 1 interface 0 has no altsetting 0
11:51:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x4b49, &(0x7f00000005c0)=0xfe)

[ 3455.892855][T17698] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3455.912762][T17698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3455.921397][T17698] usb 1-1: Manufacturer: ѕ
11:51:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x4b49, &(0x7f00000005c0)=0xfe)

[ 3456.004814][T17698] usb 1-1: SerialNumber: 㳤搿㵾ᅉ짝㽓舅ꈢꛧ뼶ᤛ娵㊀렽㟒ᗫ艃댝鏄♡ᨑ섨毝火䂸⦵♣펓퍪曌蠒漵擬嗝翙뎞ꆗ뱰캝胇⣴䟶䨿옮U䉺缿陉쪮艖뽹鑫넠塽喱⿷깯骔㇠ヷ롟烊唨岭燲䃉眺台䗹ȧ다幤騌귒稿痑ᣛ퓈ၽ袙Ѝ붫ʅ籴汮䓭ई怙㮻葟㖎ﰈ茵䞈
11:51:04 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x1fd, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)="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", &(0x7f0000000000), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

[ 3456.152909][ T2458] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
11:51:04 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x1fd, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)="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", &(0x7f0000000000), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

[ 3456.774539][T17698] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 179 proto 1 vid 0x0525 pid 0xA4A8
11:51:05 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x1fd, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)="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", &(0x7f0000000000), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

[ 3456.835039][T17698] usb 1-1: USB disconnect, device number 42
[ 3456.954180][T17698] usblp0: removed
11:51:05 executing program 0:
r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0xb3, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xe2, 0x84, 0x6b}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x5, 0xc8}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x95, 0x1, 0x5, 0x10, 0x1}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x69, 0x1, 0x200}]}, 0x9, [{0x5e, &(0x7f00000000c0)=@string={0x5e, 0x3, "18334da872672b84682e2da8304948792a84ab5b9672756c1d04c161810bc32d860240be6be2d20c6f3f8f5e73c65ffafec75d595e57ffe656cbe074cedaec3547a38bf1757504448b258e977a9b62010b0b8bffdb452eada09f73ca"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xdc, &(0x7f00000001c0)=@string={0xdc, 0x3, "e43c3f647e3d4911ddc936f1533f04e1058222a2e7a636bf1b19355a80323db8d237eb1505e143821db3c4936126111a28c1dd6b57e16b70b840b5298ef806e4632693d36ad3cc661288a4df356fec64dd55d97f9eb397a170bc9dcec780f428f6473f4a2ec655007a423f7f49961bdfaeca568279bf3eea6b9420b17d58b155f72f6fae949ae031f7305fb8ca70285584e4ad5cf7def271daf7c940c1d93a77f053f9452702e4b2645e0c9ad2ad3f7ad175db18c8d47d1099880d04abbd8502747c6e6ced44080919606ee5bb3b5f848e3508fc358365f48847"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x65, &(0x7f0000000300)=@string={0x65, 0x3, "d15026af4143e68c2b131b7a7070ce3f61ba5dfd01bafc396f513a71de139576894d0dff74e57f4dc3afdb75d3494c1302f41ad1476e85ef0cf4e8662a0091e9cfbc04cd34be1a0b3f476a43da1c7f597f1a7f3a27fa33e3fa42ea3ecd8fcbb91f7c4e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}, {0x7b, &(0x7f00000003c0)=@string={0x7b, 0x3, "9251ef4e925eb751a6d6d4ef7686878266ca3e7ef79a8559dfa1113aa7bedcca9e0488763f87d27e8a54923ecfeb055e00a93a23106cddf16f385639794e0b86a6364c79f4f3af612d0525bb9e3a47932712e08e4e7498a6a46538c7b28ce67a1024321f30e4b2d80b4cf0648196ae4a06c28c750d543af28c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}]})
syz_usb_ep_read(r0, 0x6, 0xffe, &(0x7f0000000540)=""/4094)

11:51:05 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:05 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x1fd, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)="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", &(0x7f0000000000), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

11:51:05 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x1fd, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)="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", &(0x7f0000000000), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

11:51:05 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x0, 0x39}, '\x00', "a19ab8c195a9c9178e12f7c1fe6a7e4c785eeda4125633ab0f48dd437fbe3a48", "09008668", "4c072b8a391ddcab"}, 0x28)

11:51:05 executing program 4:
socket$kcm(0xa, 0x3, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:51:05 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

11:51:05 executing program 4:
socket$kcm(0xa, 0x3, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:51:05 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

11:51:05 executing program 4:
socket$kcm(0xa, 0x3, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:51:06 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x1fd, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)="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", &(0x7f0000000000), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

11:51:06 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

[ 3457.692646][T29806] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[ 3458.122816][T29806] usb 1-1: config 1 interface 0 altsetting 179 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 3458.136177][T29806] usb 1-1: config 1 interface 0 has no altsetting 0
[ 3458.313000][T29806] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3458.322310][T29806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3458.330514][T29806] usb 1-1: Manufacturer: ѕ
[ 3458.335815][T29806] usb 1-1: SerialNumber: 㳤搿㵾ᅉ짝㽓舅ꈢꛧ뼶ᤛ娵㊀렽㟒ᗫ艃댝鏄♡ᨑ섨毝火䂸⦵♣펓퍪曌蠒漵擬嗝翙뎞ꆗ뱰캝胇⣴䟶䨿옮U䉺缿陉쪮艖뽹鑫넠塽喱⿷깯骔㇠ヷ롟烊唨岭燲䃉眺台䗹ȧ다幤騌귒稿痑ᣛ퓈ၽ袙Ѝ붫ʅ籴汮䓭ई怙㮻葟㖎ﰈ茵䞈
[ 3458.392722][ T2536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 3458.774201][T29806] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 179 proto 1 vid 0x0525 pid 0xA4A8
[ 3458.809622][T29806] usb 1-1: USB disconnect, device number 43
[ 3458.837472][T29806] usblp0: removed
11:51:07 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

11:51:07 executing program 4:
socket$kcm(0xa, 0x3, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:51:07 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

11:51:07 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x1fd, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)="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", &(0x7f0000000000), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

11:51:07 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
pidfd_open(r0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgid(r2)
r4 = syz_clone(0x0, &(0x7f0000000540)="3d7d1b664a2811c69532460f1e0e7be7", 0x10, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="a10edceb6121dcb0179d20d566b72842d052359d9f909009e90cc9ab4603f97feab77a91f7788deb4b5bf583084ee78431230972c2c960910ab98e521780a3624f30b117ad39d252718a5a69ed11bf9c146400203abbc3e51c7c6a055799c602728543090b1b2db6be9a7c7c21a229f4c065442c007902aeceb2ff05")
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
syz_clone(0x80040400, &(0x7f0000003180), 0x0, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="b941d121ee4cf565aa1f3bbea48f9868a32eafcb8874753e4fffbec1d4559ffac3142281e537f9f7eb9bf24c1ffdced36e4ae78d68f0a67c0c6ee9d6dfbb1b0345b6d25c3352c09c0a26ea95e05e661f2ecf403659d866")
r6 = syz_clone3(&(0x7f0000003540)={0x208040880, &(0x7f00000032c0), 0x0, &(0x7f0000003340), {0x4}, &(0x7f0000003380)=""/145, 0x91, &(0x7f0000003440)=""/161, &(0x7f0000003500)=[r0, r2, r4, 0xffffffffffffffff, r2, r1], 0x6}, 0x58)
ptrace$cont(0x9, r2, 0x4, 0x7f)
syz_open_procfs$namespace(r6, &(0x7f00000035c0)='ns/pid_for_children\x00')
syz_clone3(&(0x7f0000000940)={0x10000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2a}, &(0x7f0000000740)=""/141, 0x8d, &(0x7f0000000800)=""/200, &(0x7f0000000900)=[r3, 0x0, r1, r3, r3, r0, r2], 0x7}, 0x58)
syz_clone3(&(0x7f0000000c00)={0x10000000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r7=>0x0, {0x2d}, &(0x7f0000000a80)=""/101, 0x65, &(0x7f0000000b00)=""/148, &(0x7f0000000bc0)=[r3, r3, r1, r2, r0, r0, r1, r0, r2], 0x9}, 0x58)
r8 = syz_clone3(&(0x7f0000000f00)={0x80, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r9=>0x0, {0xd}, &(0x7f0000000d40)=""/143, 0x8f, &(0x7f0000000e00)=""/189, &(0x7f0000000ec0)=[r0, r3, r1, r0, r2, r3, r0, r0, r0], 0x9}, 0x58)
r10 = syz_open_dev$mouse(&(0x7f000000b940), 0x200, 0x0)
syz_clone(0x20000, &(0x7f0000003600)="e4ecbcf0b47b7fb8d7a35a96978596b29ade5bfac033a518888e328267cccb8fd72de245443c73b72862a2fc", 0x2c, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)="99f97b8f13ba3d226f214129f0d52dcfda9bf2ed17dd64c7656c1b7362099e7c5dc38c694ecb56b4daea54229fa75d439db4f9e003ac4cc578ea0359142592cdbe15019df919bbfb9f2220aed226583bafd0ff68cd3ec646f778cb98448a2f03cf4044c82fd3a1cb503ff3245b")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r10, 0x0, 0x25, 0x4}, 0x10)
read$FUSE(r10, 0x0, 0x0)
syz_clone3(&(0x7f0000000fc0)={0x100026000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/252, 0xfc, &(0x7f00000004c0)=""/105, &(0x7f0000000f80)=[r4, r5, r9, r2, r7, r3, r8], 0x7, {r10}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000003100), 0x8c401, 0x0)
read$FUSE(r10, &(0x7f0000001080)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:07 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

11:51:07 executing program 4:
socket$kcm(0xa, 0x3, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:51:07 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

11:51:07 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

11:51:07 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

11:51:07 executing program 4:
socket$kcm(0xa, 0x3, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:51:07 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x40045569)

11:51:07 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000)=0x8)

11:51:07 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000004680), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000200)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0})

11:51:07 executing program 4:
socket$kcm(0xa, 0x3, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:51:08 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_connect)

[ 3459.642805][ T2589] input: syz1 as /devices/virtual/input/input388
11:51:08 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000004680), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000200)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0})

11:51:08 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x40045569)

11:51:08 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000)=0x8)

11:51:08 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x81001)
mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x5110, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

11:51:08 executing program 4:
r0 = io_uring_setup(0x1de0, &(0x7f0000000440))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
r4 = io_uring_setup(0x1de0, &(0x7f0000000440))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001ffff0000000000", @ANYRES32=r4])
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r1)

11:51:08 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:08 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x81001)
mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x5110, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

11:51:08 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000)=0x8)

[ 3460.109504][ T2612] input: syz1 as /devices/virtual/input/input389
11:51:08 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000004680), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000200)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0})

11:51:08 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x40045569)

[ 3460.213264][ T1896] udevd[1896]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
11:51:08 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x40045569)

[ 3460.290062][ T2624] input: syz1 as /devices/virtual/input/input390
11:51:08 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x81001)
mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x5110, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

11:51:08 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000)=0x8)

[ 3460.358736][ T2626] input: syz1 as /devices/virtual/input/input391
11:51:08 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000004680), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000200)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0})

11:51:08 executing program 2:
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0xa00c13, 0x0)
removexattr(&(0x7f0000002880)='./file0\x00', 0x0)

11:51:08 executing program 2:
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0xa00c13, 0x0)
removexattr(&(0x7f0000002880)='./file0\x00', 0x0)

11:51:09 executing program 4:
r0 = io_uring_setup(0x1de0, &(0x7f0000000440))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
r4 = io_uring_setup(0x1de0, &(0x7f0000000440))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001ffff0000000000", @ANYRES32=r4])
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r1)

11:51:09 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:09 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x14)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r1=>0x0, @local, @local}, &(0x7f0000000740)=0xc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10)

11:51:10 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x81001)
mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x5110, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

11:51:10 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'})

11:51:10 executing program 2:
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0xa00c13, 0x0)
removexattr(&(0x7f0000002880)='./file0\x00', 0x0)

11:51:10 executing program 4:
r0 = io_uring_setup(0x1de0, &(0x7f0000000440))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
r4 = io_uring_setup(0x1de0, &(0x7f0000000440))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001ffff0000000000", @ANYRES32=r4])
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r1)

11:51:10 executing program 2:
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0xa00c13, 0x0)
removexattr(&(0x7f0000002880)='./file0\x00', 0x0)

[ 3461.656324][ T2658] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.5'.
11:51:10 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x14)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r1=>0x0, @local, @local}, &(0x7f0000000740)=0xc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10)

11:51:10 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x14)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r1=>0x0, @local, @local}, &(0x7f0000000740)=0xc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10)

11:51:10 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:10 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

[ 3461.832686][ T2666] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'.
11:51:10 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x14)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r1=>0x0, @local, @local}, &(0x7f0000000740)=0xc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10)

[ 3461.943932][ T2673] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3462.104838][ T2681] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'.
11:51:11 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:11 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x14)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r1=>0x0, @local, @local}, &(0x7f0000000740)=0xc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10)

11:51:11 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x14)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r1=>0x0, @local, @local}, &(0x7f0000000740)=0xc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10)

11:51:11 executing program 4:
r0 = io_uring_setup(0x1de0, &(0x7f0000000440))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
r4 = io_uring_setup(0x1de0, &(0x7f0000000440))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001ffff0000000000", @ANYRES32=r4])
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r1)

11:51:11 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:11 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

[ 3463.613752][ T2692] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3463.703240][ T2693] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.5'.
11:51:12 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:12 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x14)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r1=>0x0, @local, @local}, &(0x7f0000000740)=0xc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10)

[ 3463.946683][ T2721] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.5'.
11:51:12 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:13 executing program 4:
r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_TIMEOUT(r0, 0x702, 0x80000000)

11:51:13 executing program 4:
r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_TIMEOUT(r0, 0x702, 0x80000000)

11:51:13 executing program 4:
r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_TIMEOUT(r0, 0x702, 0x80000000)

11:51:14 executing program 4:
r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_TIMEOUT(r0, 0x702, 0x80000000)

11:51:14 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:14 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:14 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0)

11:51:14 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0)

11:51:14 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:14 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:14 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0)

11:51:15 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:15 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0)

11:51:15 executing program 4:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

[ 3467.626864][ T2777] netlink: 'syz-executor.4': attribute type 9 has an invalid length.
[ 3467.662241][ T2777] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[ 3467.670393][ T2777] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
11:51:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="f5", 0x1}], 0x1)

11:51:17 executing program 4:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

[ 3469.240854][ T2796] netlink: 'syz-executor.4': attribute type 9 has an invalid length.
[ 3469.342256][ T2796] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
11:51:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="f5", 0x1}], 0x1)

11:51:17 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="f5", 0x1}], 0x1)

11:51:17 executing program 2:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

[ 3469.421969][ T2796] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
11:51:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="f5", 0x1}], 0x1)

11:51:17 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="f5", 0x1}], 0x1)

11:51:18 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="f5", 0x1}], 0x1)

[ 3469.767181][ T2808] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
[ 3469.788265][ T2808] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[ 3469.840064][ T2808] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
11:51:18 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fd}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

11:51:18 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="f5", 0x1}], 0x1)

11:51:18 executing program 1:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

11:51:18 executing program 0:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

[ 3470.469675][ T2836] netlink: 'syz-executor.1': attribute type 9 has an invalid length.
11:51:19 executing program 4:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000226bd7000fedbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000de586006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000800010070353d0011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e65746465767369756900000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

11:51:19 executing program 3:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

11:51:20 executing program 2:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

11:51:20 executing program 1:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

11:51:20 executing program 0:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

11:51:20 executing program 4:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000226bd7000fedbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000de586006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000800010070353d0011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e65746465767369756900000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

11:51:21 executing program 2:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

[ 3472.935288][ T2880] validate_nla: 20 callbacks suppressed
[ 3472.935334][ T2880] netlink: 'syz-executor.4': attribute type 9 has an invalid length.
[ 3473.043399][ T2880] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
11:51:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

[ 3473.082206][ T2880] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[ 3473.169982][ T2886] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
[ 3473.208483][ T2886] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
11:51:21 executing program 3:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

[ 3473.236972][ T2886] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
11:51:21 executing program 1:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

11:51:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

[ 3473.399121][ T2897] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 3473.452247][ T2897] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[ 3473.482214][ T2897] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
11:51:22 executing program 0:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

[ 3473.806338][ T2905] netlink: 'syz-executor.1': attribute type 9 has an invalid length.
11:51:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

11:51:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

11:51:23 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

11:51:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

11:51:23 executing program 3:
unshare(0x40000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/102, 0x66}], 0x7)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x87})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x0, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x6, 0x6, '\x00#'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}})
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x95, &(0x7f0000000000)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, r8})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040891)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', r8, 0x8000, 0x1, 0x1, 0xffffffc0, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x4, '9m'}, {0x1, 0x12, "9679522c0c7b37e2b714fe93a563fc1b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ae4ffe393d102d38986b7f6638aa"}, @generic={0x82, 0x2}, @lsrr={0x83, 0x1b, 0x42, [@loopback, @empty, @rand_addr=0x64010100, @loopback, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0x8c, 0x0, 0x4, [0x4, 0x6, 0x1000, 0x8, 0xffffffe1, 0x6, 0x7fffffff, 0xffff, 0x7b, 0x0]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x10000380)
preadv(r0, &(0x7f0000000200), 0x0, 0x6, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001e0009010000000000000900766c616e00000000040902810600460028f1f85816c9a33882fea9d97a0bffffffff070000000000000000000c00080001000000f5ffffff8d2c4187a97ae0d872da65c6020000000000000028"], 0x4c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000180))
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

11:51:24 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10)
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000007540)=[{0x2, 0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000003c40)=""/250, 0xfa}], &(0x7f0000003f00)=[0x100000000]}], 0x1)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f00000039c0), 0x4000000000001b3, 0x0)

11:51:24 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x26}})

11:51:24 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

11:51:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

11:51:24 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b27c8140501da1603dc3000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:51:24 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x1a0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x38}}, 0x0)

11:51:25 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x1a0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x38}}, 0x0)

11:51:25 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10)
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000007540)=[{0x2, 0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000003c40)=""/250, 0xfa}], &(0x7f0000003f00)=[0x100000000]}], 0x1)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f00000039c0), 0x4000000000001b3, 0x0)

11:51:25 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x26}})

11:51:25 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x1a0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x38}}, 0x0)

11:51:25 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10)
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000007540)=[{0x2, 0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000003c40)=""/250, 0xfa}], &(0x7f0000003f00)=[0x100000000]}], 0x1)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f00000039c0), 0x4000000000001b3, 0x0)

11:51:25 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x26}})

11:51:25 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x1a0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x38}}, 0x0)

[ 3476.892742][T29806] usb 1-1: new high-speed USB device number 44 using dummy_hcd
11:51:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0)

11:51:25 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x84, 0x25, 0x0, 0x0)

11:51:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

[ 3477.282378][T29806] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=c3.3d
[ 3477.302158][T29806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3477.323014][T29806] usb 1-1: config 0 descriptor??
[ 3477.812678][T29806] airspy 1-1:0.0: Board ID: 00
[ 3477.817519][T29806] airspy 1-1:0.0: Firmware version: 
[ 3478.893192][T29806] airspy 1-1:0.0: usb_control_msg() failed -71 request 10
[ 3478.917335][T29806] airspy 1-1:0.0: Registered as swradio16
[ 3478.924129][T29806] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 3478.937401][T29806] usb 1-1: USB disconnect, device number 44
11:51:27 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b27c8140501da1603dc3000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:51:27 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x26}})

11:51:27 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10)
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000007540)=[{0x2, 0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000003c40)=""/250, 0xfa}], &(0x7f0000003f00)=[0x100000000]}], 0x1)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f00000039c0), 0x4000000000001b3, 0x0)

11:51:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0)

11:51:27 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x84, 0x25, 0x0, 0x0)

11:51:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fbdbdf252e0000000c009900e60600003800000008009f0007000000080027000100000008002700000000001e009400000409000000000000000019003f000f0000000008ff000000020000"], 0x58}}, 0x20002000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x80000000, 0x1, 0x0, 0xfffffffe})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000ffffffff", 0x58}], 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x368, 0x0)
ptrace$pokeuser(0x6, r3, 0x368, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x100000001)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ptrace$pokeuser(0x6, r4, 0x368, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3eff0a1a2d2"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff109}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20001c0)

11:51:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0)

11:51:27 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x84, 0x25, 0x0, 0x0)

11:51:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0)

11:51:27 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xf6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

11:51:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0)

11:51:28 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x84, 0x25, 0x0, 0x0)

[ 3479.802899][T29806] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 3480.172948][T29806] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=c3.3d
[ 3480.191867][T29806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3480.225343][T29806] usb 1-1: config 0 descriptor??
[ 3480.722404][T29806] airspy 1-1:0.0: Board ID: 00
[ 3480.727260][T29806] airspy 1-1:0.0: Firmware version: 
[ 3481.802363][T29806] airspy 1-1:0.0: usb_control_msg() failed -71 request 10
[ 3481.811428][T29806] airspy 1-1:0.0: Registered as swradio16
[ 3481.817757][T29806] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 3481.831254][T29806] usb 1-1: USB disconnect, device number 45
11:51:30 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b27c8140501da1603dc3000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:51:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0)

11:51:30 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xf6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

11:51:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0)

11:51:30 executing program 5:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

11:51:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0)

11:51:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0)

11:51:30 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xf6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

11:51:30 executing program 1:
fsopen(&(0x7f0000000880)='qnx6\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x7, {}, {}, 0x4, 0x7fffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
setuid(0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000280)={0x6})
readv(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @generic={0x9, 0xe, 0x7, 0x81, 0x9}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x9, 0x1, 0x20, 0x4}, @func], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000700)=""/242, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x5, 0xcd}, 0x10, 0xecfc, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff]}, 0x80)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000680)=ANY=[@ANYBLOB="010000ff06000000180000005325e0e487725852733e94b7536f5a6c53aaad952c3b2648f84a8916f5989a1a6c65a5aefbae7e4e24b2", @ANYRES32, @ANYBLOB="01010000d9f000002e2f66696c65"])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r6 = dup(r3)
sendfile(r5, r6, 0x0, 0x80006)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @remote, 0x20}, 0x1c)

11:51:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000021}]})

11:51:30 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xc)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xf6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

11:51:31 executing program 5:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

[ 3482.732901][T29806] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 3483.160671][T29806] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=c3.3d
[ 3483.170003][T29806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3483.197743][T29806] usb 1-1: config 0 descriptor??
[ 3483.692511][T29806] airspy 1-1:0.0: Board ID: 00
[ 3483.697704][T29806] airspy 1-1:0.0: Firmware version: 
[ 3484.762283][T29806] airspy 1-1:0.0: usb_control_msg() failed -71 request 10
[ 3484.780151][T29806] airspy 1-1:0.0: Registered as swradio16
[ 3484.787578][T29806] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 3484.802549][T29806] usb 1-1: USB disconnect, device number 46
11:51:33 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b27c8140501da1603dc3000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:51:33 executing program 4:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

11:51:33 executing program 3:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

11:51:33 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r2)
openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x10600c2, 0x0)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002400)={&(0x7f00000023c0)='./bus\x00'}, 0x10)
r5 = dup2(r4, r3)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000002340)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x1000}}, './bus\x00'})
connect$inet6(r7, &(0x7f0000002380)={0xa, 0x4e20, 0x39a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81e8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000001340)={r9, 0x0, "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", "fc4f5aa2ef84577869809ff66ab98972de68cede89092ffda877f6681f95f1023003ca9cc45193838095f4a0db5dc8a49b1b446aa5a2182e3697999d5d9514a22aae9cba2a502d94fb0b5948bc9007e3f2247024a4f5071ccf07d1c0fee24bf0afcca16005a96c626675efcefb2a03361aea22e389a5320d16bf0dd16ab6b3b096575f5d45d0e8af71eaec55d4da7e466956950aa2f7662d9e62f0b684a5d01e55fc543d6082aa53e902706f836977637162272898d5c65010c426bcbabcf430f412129a3106a1e5f3a084fe8750336ef65cd3476935d7c7f936772482729e74192a4d2a01606fd665a6761663d7806bc7f4eb70d63cba8fe8cacb9f70dafb0a48135587b436bb884a0b34e8a97f405efd36a7b2372872a1478d73766fc5a5ef9c023818f06f035311942008def0570e6619379e052db70761e5d5bb1d1a39f1ddfd57b72cfb19a267e9515c3ee4693875a3aefd0baf89010782c26b56a7cd7a396f387ed2ef97dd16ddcf580976bb855a6ad131c26c7c8b3f874bf83a8c9edac41c33915a577dbfbf6a4de457de3e6d0de6bfb5ba57016159424ccc5b9e391687901c65e40aed26a8521c6b6ac797dc6b73392318a2c025dffde0b2bd486750e5db4b1a13608e9f08b3f199ce32ea02bef591996fbc3683dc27764848277f79fc9ef1e44ff1bb1701a2f40a362767ef275176a603ca1a18c4d869c13f825e820511bc7b5e8af79fbdd5a613eae7fa90660127870d2e2c73490b0cc9e552f714fe5f56753199e4749b6e82886961fbed82469a58df13fc636f1349f5b7b222dcad6c67fdedcf60fe2a1411c22ae98df77caf8bfd7e92eedef9662b02700dc16588cf459e816328f282a6792d25df19ace3074ec28701ed3f550d46efedfb78ec892507958355effd203328265603303af50987d9337385b3565808aa796b81681ca9a0ea05e7ecfd6cb28b095d63812c3af7b5c05aeb27bd2d79131a4db6b747a90dd43ecc8505279bceccdcddc17e823a08bed4c0466da45e15845b4f82e2815a1e53d76a586ba76dc97d4a23c76ee8d092a893dbb61e5a79f15879af0646bceb7c8fd729ad1e041a3548ed2bb6e5d0e42d39545025db0764e49260cfde17efa3799c588eae131f13cd09931a18c1ee70d2a6c0ab0860ddaa139204fb08d61518cf719bb94ee9620ae62aadcc371ee9d198dc3d39a75e48c9f6b4829c26f4d50ad2363f333a1a38ea2d4fd582b16bbf9c2f827cc7f3047080f51ce8f3cacfb6af1c203e318b55fed3751525df4409df05c0c30cc33b5d51e3f6ef45418ff40d374cc0b3d44d16ed9ca8b5468fe3a4f70bcba7ac9a8ee9f37f2f1ee1b12addba9c737687b0f1c93e9afdd11d90083b11b17a3f96aa491044afe6c706687c9b439e6e9a192b3d052c0eacfadb3a8deff0671ad30d2e6cb9c4eaba95d9e85dddf579ecf78d9ec9dcc6ac965cc34047e2b13024a0a779ead3fd02fbe805359307cbab2f474cb4dec4e3bb567d6093bae1d6e434120b15c432ef47891652bb9992be8c62b7f6b1661f61809f1dc82c62f7fe668f767466d366ae3a74a869302bba23fb8d133bc831471b1e6f0a9e6997b65bd63159436e5fad6344f6f734287ac56a1ef2a5b415ab68a0de027d864aeeb851fd4975ff512eeec5111d6acdd70221b74c6cbeb0db233a8866f4b8192fce8671bcc24a3e46c32c0f54c8aa255350492cc751692810c2806b99f85d44c1cad7c1c2ea35fe899d311e4be0ecbe1809f4c536b810c3eb9a463078d70c1d0a99b6904c2548ce8cb1f15c8516567447bcf60c9a0804d8f41b69267775c4f23c6a8a18ed2ead5179c6860a40c0b0a97af78e8cbe04626c2c7f116eccced7c6c7b41542d36a040792218323f93fb1cde3763b3bf5370b7d64816c9fb9c4d43a192a82625035f692acd0c09953d919cdcf721fe37bf566a02284d781e38361d32015fb9f5034e26460a438ab00b0d0da7c818659d4728ae8f2827fc1314e8a114cea68363dc5b350bc768913b37007798e2003d1216ee42e4d3b90f9ab3ccb3705f5ecf24f28aaf8583a6b037e1a76553f23a49144f3027d7960fc163da39e2dd6bf0fe65b4acd311b14320060b6e1500e908086dde2296789df9b05946005cc0222e9f985f9c5d3fe49eb2a26671d4eadfea6eedd0dd91c1ba39f8e043a5de558ebb402d841b59e67dd0ee9559657751d1a25268b63b65d434304200711dd41b2b5093f06fd9b0db63cc3c05593d5404263f7b4b16e832f45984e92cff31bec5bd366a255c8453ae91e45565a4e9dbd98f61ffc4e47c3955b89966d2fb09c5914b22450081b9de08af581da7ccc88976628e0a7cf988096432587f3017d1163945d586b8de77ea0ac2472c64b47a046abdfa8f599f4bc64b7dcd80ab2d03933db861f6a6197e24a01b4e9cb6d54a6fb62bf19e77f636473299f55897289b8e0edf57e7ac39e3670dd26c4410c34d8c6a79c2a2ed900fee3dd83b51103de3c2b3fc6e27dcf52e27b9578a4ad22fe2eddcf23d9356644aaa1f638d1511edf804c1c337063b0284c20e047b2f356af60b136a1177b534269c561e749a8e1b2da1840f4dbe710c16140fa74624f01f4cff54ba67a40f816c087a7fd6d3b9762b1dfd9f8f444daf93c10e136f4d4a9266862a951df01ab5aa139555344bdcc1f40da27220e0c2bfb993c5be193d62ee05a1651a23ee2546b88c95f9b644ea85492504b7c6ab411d3a013b8c7498033b34bf5dad0994da39964e32119c42b8b1f82ba702e41f82a8f86693478752be3cb9d08a6fb6a9a60c73704cfd935cd4ece27c6115e5f6a1b62c8c417624b553a43633561734e53ed4e8629f25de8f58f964625b010d267f48c51bb59679668820b57cb4c439703ecb4802fb6267150eaee3533d3bb16295d103c02db623b506c9535bf6fc0c5b456b3a6c580dc5eef97f5dc3670468773c6217385da93e8aa5ec203e8a9c17bb8ca3928eb1f9679f6b007c1d21734a00039beeabfd0932794a3b5b05ede80e6d251b41658b480c4f90e070cc04d5d54b74260f80817633c995324945ef44d489a70e259dc7f5f029be80b210ccc5ae144e0f0783e05235bb9e27e95d4b343311b229503e5ab075a18744ea0a7c84173ee16e8d34e0166701f7929dc1ab08f2b8f40ee25e2f2cbe6a5db7f25b1baca4b72b5fda8c2fa51b3b299d7658eeef1052e029cf80bea9e554dd34ca6f792badfdc3a6bee334d6423333c30dcf10459056c5bb0f0089731714938bb3f33526badf89bceff82e49ff2dfa490e998f2eca2968cc28366a231ecaed9247622b5ee3b88528d2483ec441d6a236fbc84d29b756074c50450098fa5eb889bee42af8b3e4b0bacb5be63c4449cf4dee490f6f1690645e45fe0f8a2e446732301cc924ee397fa9dd4f69f66731ba86eb8436165d9a7f9ac2559f0610c1d4c2e3cd552d034595bd2225351e2ae038fb7006db3479ada5ba177203c735ff31b935d6ecda7880b155fa6e41c9fdb033fdcb14af9a7421e49b72228a145243d3eba03043cbf9c568bda2a80c486a2148535967653f9ada0de3ec6085d5e9f5c062b28b10b59a61701a2afb1d3331f89011f4181c82c0782759f4f0f4c1290af53bfea4c20455130fce21a25800d5c5415d6c4e52ebd060ec0d3d3ce5b196c41adcc57faf65156bdf854869bc8ee8627f13c59d895044128d6d9b617e0d43aad016a946d94a50269ecc5805eb7a0f727f7e0673a85478e2bff8bdc6be5d5152f8a2a11b74b0d1ac71782e73b4333f251dca8e3718d57023a4ba06255d3fe550b1084a52989e9d8a0c96d32ffedd80b6ae05017e696cd88ff9384bd42eacad85e0a518a18a15348d499456147b3630702a8cbf23cefb479d9bf2bb75a64e098ea0a4b9dffa84d5f857e41bf3a8cdddf7861d318f851845a0c38e4b6aadfc6218a1fa74163d1353d8e90577ccc2bb91881db9bffdbf53c74c9ad05885ab92d4c94d8a2c609c23b1a1d6b48ed5075bd3109d930d99bdc4bd5921e21c40df066b238d43b887fb07a2fbc0b6995cd200fcb0518135b45ecfc805959f160713a1e3b5a739834ec9275e07c94c40c047c040777ddde5c99c69a115d1addcd188f29ea30e33613baa6334029f9ff0dc00ad7b4babf74c203a4eda3a7899be8896c2fe2cc7552cb995fc9df55c770244e9af169797acc0878c4ff4a4c65cebd3c8e92c49306ce92c771d51894ac484220072f67cd3cefe1810a0a5a8db8f82659e998a97b26aa98848ad24c7477932257c1d8fc4159c38eff6481f55932a49bb09b98fb2ca69da86bc886deb6de5b38088c8ecab1422014f5ab6b1099300777b83f8aad3415390acc837d47892953e9a4fa94308b7089ecbfb1045963d58d718f969afa70c3dc34155b78a2616c49a18893937a376e6bb1dc785e1a0efad271f22cbf6cd23141c5679e931482fc08a333a559a73d7ab519fd189af7551be3d359160cb45a36c82b7cde18cb0d4034024e26ec7d0006a71b4277ad4101fdcdce69d977186287166fb955fbab9bfc1036b178f356d409cf2a609da1f1b62e7e870523d49e6be40f399d1ec6683712e52c75dd86babb746e09180e0000181f88b328f61c5ef2f74ea72c8e24d272109f34698ddce98624091b26db8d0d9714d9e8f65516e40cc5feed18e83d22bec664a48888a603dc7cbe833e395186713a9b9e23d265edd502cd39b549f340a9df914f2b1c478c56ff0875f980fd5607b5e0ae4e85937e3bd70d88940c118ad8a595c8fe6c76125b43dbd5869ab585db4623f4814fb41d9adfb0ce8211b6ecab65779e9dac4441486d301cbaa3135dc18785635c60f1ed7fdf40bfdc3833b8639e0934491648158d8a0f6308c8b4aaea2f0442f3b5d825513b8e27ccbda7694c6a929aee79a57d3176e25c5bb6d554048d5c8170d0b44dca6c3ebcbdd67d1d867a3b82040a2a4b7c4940a8ff3730248315e0febb9ec7b69df18828b04b4e2afa172d48beffaad71e66ba524b1a31cb5b0df829a0986fa85fd8efa37befbbe3d407392882e7be905fd8ce77b117338a878c84a1331b4c3a0aab0f85f51452e532b97dbca5533a322ac4e34e43c0a381f9a205eb39c3c6c2b300988cffcccc71ce9bd7376f2781d4d7ff650dec16026abc7d4045649668a2b9f9eb479d0c786b63367e2b8010196660baf3a579ee224f1db2dc30de285978578178fda038eb9d861570295df0917d5e09cbff71e192978df00f98cbe311b8d96abf24be806a151733d08dd586301093bced6a9f2ad8b5641fdc84c6aee677ae723b4afbeeca58510d309027ca77f1c880863bd557cdd3396a4e959910be85814575bc8717033d64b8172f24a81cc8bd440dcb9f5d8d4f27c7e5972235180d5e35d574a747c5cdc8"})
ftruncate(r6, 0x208200)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

11:51:33 executing program 5:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

11:51:33 executing program 1:
fsopen(&(0x7f0000000880)='qnx6\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x7, {}, {}, 0x4, 0x7fffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
setuid(0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000280)={0x6})
readv(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @generic={0x9, 0xe, 0x7, 0x81, 0x9}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x9, 0x1, 0x20, 0x4}, @func], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000700)=""/242, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x5, 0xcd}, 0x10, 0xecfc, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff]}, 0x80)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000680)=ANY=[@ANYBLOB="010000ff06000000180000005325e0e487725852733e94b7536f5a6c53aaad952c3b2648f84a8916f5989a1a6c65a5aefbae7e4e24b2", @ANYRES32, @ANYBLOB="01010000d9f000002e2f66696c65"])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r6 = dup(r3)
sendfile(r5, r6, 0x0, 0x80006)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @remote, 0x20}, 0x1c)

11:51:33 executing program 3:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

11:51:33 executing program 4:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

11:51:33 executing program 5:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

11:51:34 executing program 3:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

[ 3485.632483][T29806] usb 1-1: new high-speed USB device number 47 using dummy_hcd
11:51:34 executing program 4:
r0 = epoll_create(0x10000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

11:51:34 executing program 5:
fsopen(&(0x7f0000000880)='qnx6\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x7, {}, {}, 0x4, 0x7fffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
setuid(0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000280)={0x6})
readv(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @generic={0x9, 0xe, 0x7, 0x81, 0x9}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x9, 0x1, 0x20, 0x4}, @func], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000700)=""/242, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x5, 0xcd}, 0x10, 0xecfc, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff]}, 0x80)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000680)=ANY=[@ANYBLOB="010000ff06000000180000005325e0e487725852733e94b7536f5a6c53aaad952c3b2648f84a8916f5989a1a6c65a5aefbae7e4e24b2", @ANYRES32, @ANYBLOB="01010000d9f000002e2f66696c65"])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r6 = dup(r3)
sendfile(r5, r6, 0x0, 0x80006)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @remote, 0x20}, 0x1c)

[ 3486.012208][T29806] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=c3.3d
[ 3486.069044][T29806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3486.156407][T29806] usb 1-1: config 0 descriptor??
[ 3486.662661][T29806] airspy 1-1:0.0: Board ID: 00
[ 3486.667490][T29806] airspy 1-1:0.0: Firmware version: 
[ 3487.733004][T29806] airspy 1-1:0.0: usb_control_msg() failed -71 request 10
[ 3487.744246][T29806] airspy 1-1:0.0: Registered as swradio16
[ 3487.754749][T29806] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 3487.784658][T29806] usb 1-1: USB disconnect, device number 47
11:51:36 executing program 5:
fsopen(&(0x7f0000000880)='qnx6\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x7, {}, {}, 0x4, 0x7fffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
setuid(0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000280)={0x6})
readv(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @generic={0x9, 0xe, 0x7, 0x81, 0x9}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x9, 0x1, 0x20, 0x4}, @func], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000700)=""/242, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x5, 0xcd}, 0x10, 0xecfc, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff]}, 0x80)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000680)=ANY=[@ANYBLOB="010000ff06000000180000005325e0e487725852733e94b7536f5a6c53aaad952c3b2648f84a8916f5989a1a6c65a5aefbae7e4e24b2", @ANYRES32, @ANYBLOB="01010000d9f000002e2f66696c65"])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r6 = dup(r3)
sendfile(r5, r6, 0x0, 0x80006)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @remote, 0x20}, 0x1c)

11:51:36 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)

11:51:36 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r2)
openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x10600c2, 0x0)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002400)={&(0x7f00000023c0)='./bus\x00'}, 0x10)
r5 = dup2(r4, r3)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000002340)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x1000}}, './bus\x00'})
connect$inet6(r7, &(0x7f0000002380)={0xa, 0x4e20, 0x39a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81e8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000001340)={r9, 0x0, "0dea3d72557c140dae4aa1d6f90dc8874977d9396aba048f6167d31edc21d5086c9073d68e01496e77ced78cb2538ed6857487b95d4f67555c123078a9d162df05c95e974127c6cfda68f6bf7ab4ba7bb343f20c4c1e3cceda423e7b8b13de424ec4fdd8826ae8f2ebc7b9d9b7a22d7211772e0e8e017e86d48a2fe1f633d6c44aa02f468ea89510088786403aa8be9212a5f450b3384b59d9c9baa9ee73c24b281f87029a49c790eeb4bae52eeddb474b7620945cb913318679f5b7c0c10094fca877d3a0621fce7e62bb02f926f515f3f2364893aa9720c6228d5f1c02b5d4afd331859e054dc54fc9324722b32bed6ecc72be8bd18da5c665f3c556fe42b1", "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"})
ftruncate(r6, 0x208200)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

11:51:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x3c}}, 0x0)

11:51:36 executing program 1:
fsopen(&(0x7f0000000880)='qnx6\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x7, {}, {}, 0x4, 0x7fffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
setuid(0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000280)={0x6})
readv(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @generic={0x9, 0xe, 0x7, 0x81, 0x9}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x9, 0x1, 0x20, 0x4}, @func], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000700)=""/242, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x5, 0xcd}, 0x10, 0xecfc, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff]}, 0x80)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000680)=ANY=[@ANYBLOB="010000ff06000000180000005325e0e487725852733e94b7536f5a6c53aaad952c3b2648f84a8916f5989a1a6c65a5aefbae7e4e24b2", @ANYRES32, @ANYBLOB="01010000d9f000002e2f66696c65"])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r6 = dup(r3)
sendfile(r5, r6, 0x0, 0x80006)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @remote, 0x20}, 0x1c)

11:51:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x3c}}, 0x0)

11:51:36 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b)

11:51:36 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d090987f70e06d038e7ff7fc6e5539b324d078b089b07083861090890e0878f0e1ac6e7049b3368959b4b9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x3b3cc1e9e7df1ab7}}, 0x9b)

11:51:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x3c}}, 0x0)

11:51:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x3c}}, 0x0)

11:51:37 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b)

11:51:37 executing program 3:
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x171}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @private2}, 0x1c)

11:51:38 executing program 5:
fsopen(&(0x7f0000000880)='qnx6\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x7, {}, {}, 0x4, 0x7fffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
setuid(0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000280)={0x6})
readv(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @generic={0x9, 0xe, 0x7, 0x81, 0x9}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x9, 0x1, 0x20, 0x4}, @func], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000700)=""/242, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x5, 0xcd}, 0x10, 0xecfc, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff]}, 0x80)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000680)=ANY=[@ANYBLOB="010000ff06000000180000005325e0e487725852733e94b7536f5a6c53aaad952c3b2648f84a8916f5989a1a6c65a5aefbae7e4e24b2", @ANYRES32, @ANYBLOB="01010000d9f000002e2f66696c65"])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r6 = dup(r3)
sendfile(r5, r6, 0x0, 0x80006)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @remote, 0x20}, 0x1c)

11:51:38 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d090987f70e06d038e7ff7fc6e5539b324d078b089b07083861090890e0878f0e1ac6e7049b3368959b4b9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x3b3cc1e9e7df1ab7}}, 0x9b)

11:51:38 executing program 3:
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x171}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @private2}, 0x1c)

11:51:38 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)

11:51:38 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r2)
openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x10600c2, 0x0)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002400)={&(0x7f00000023c0)='./bus\x00'}, 0x10)
r5 = dup2(r4, r3)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000002340)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x1000}}, './bus\x00'})
connect$inet6(r7, &(0x7f0000002380)={0xa, 0x4e20, 0x39a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81e8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000001340)={r9, 0x0, "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", "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"})
ftruncate(r6, 0x208200)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

11:51:38 executing program 1:
fsopen(&(0x7f0000000880)='qnx6\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x7, {}, {}, 0x4, 0x7fffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
setuid(0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000280)={0x6})
readv(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @generic={0x9, 0xe, 0x7, 0x81, 0x9}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x9, 0x1, 0x20, 0x4}, @func], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000700)=""/242, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x5, 0xcd}, 0x10, 0xecfc, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff]}, 0x80)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000680)=ANY=[@ANYBLOB="010000ff06000000180000005325e0e487725852733e94b7536f5a6c53aaad952c3b2648f84a8916f5989a1a6c65a5aefbae7e4e24b2", @ANYRES32, @ANYBLOB="01010000d9f000002e2f66696c65"])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r6 = dup(r3)
sendfile(r5, r6, 0x0, 0x80006)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @remote, 0x20}, 0x1c)

11:51:38 executing program 3:
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x171}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @private2}, 0x1c)

11:51:38 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

11:51:38 executing program 3:
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x171}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @private2}, 0x1c)

11:51:38 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

[ 3490.290908][ T3132] bond4: (slave vlan1): Releasing active interface
[ 3490.450811][ T3137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
11:51:39 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)

11:51:39 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

[ 3490.856669][ T3146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
11:51:40 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r2)
openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x10600c2, 0x0)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002400)={&(0x7f00000023c0)='./bus\x00'}, 0x10)
r5 = dup2(r4, r3)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000002340)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x1000}}, './bus\x00'})
connect$inet6(r7, &(0x7f0000002380)={0xa, 0x4e20, 0x39a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81e8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000001340)={r9, 0x0, "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", "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"})
ftruncate(r6, 0x208200)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

11:51:40 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

11:51:40 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)

11:51:41 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

11:51:41 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

[ 3492.696970][ T3156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3493.057307][ T3163] bond11: (slave vlan1): Releasing active interface
11:51:42 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

11:51:42 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

11:51:42 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

[ 3493.715171][ T3169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3493.997088][ T3174] bond22: (slave vlan1): Releasing active interface
11:51:42 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

[ 3494.365629][ T3179] bond7: (slave vlan1): Releasing active interface
[ 3494.523272][ T3181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
11:51:43 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

11:51:43 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

[ 3495.417812][ T3186] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3495.521474][ T3187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
11:51:44 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

11:51:44 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

[ 3495.772931][ T3195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3495.982311][ T3197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
11:51:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x43e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x280, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410)

11:51:44 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

[ 3496.530582][ T3205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
11:51:44 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

11:51:44 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="0100000000000000d509000000000000070700000000000000000000000000000100008000000000040000000000000000000000000000000100010001040000000000000000004093000000000000090000000000000005000000000000004000000000000000000000000000120000000000000000000000000000000000007fc31b67b201c80f56b59018d40000000000000000000000000000000000000000000000000000000000000000000001000000006367b46abbcf99536de54c2257792c0000000000000000628d1c360c310fe6ff663d3bccb664a61389cd9d92f28a92b77b1977f6e5c6c77a1af29c1b5025aa0942c12270eb59965d2b16d608a0c7b68ee84bdc54845682f9b57615865da8830fbcaf3805c3eb7d045649d1ac4c7f6a87443df4b4ad0f99287358ca2121ad172cdf7f0f85df59bfabf119588077580ef6dba20449611fcd41ae817cab75f21fcc4cd624452c15e5eb6b1031b9485050f46010915eabcff9c93727d18595bb000000007ab0a52aa0ea1885e5342b34e3787ac4b6b18f2090957768ce4f460e5faf06505af9d8b401010000000000004517f1b6e014cf5aadd6f86a4f5310f982f954fd68943a69563054995875e7524141014dbe877583eb6fb5e9e7360280304b9ff19fb40fca134387432749d247f85e736bf828cc015ab5e09bc9b141f8759202cec05363d567e5a217a90fa73ab90135a3f5d5fd64a7bbef5b70528b285242a1b7dbfc000cc2d2ed22e5c2919e5e7cf09d43337cd0901a99aff1277f14ff7f013c84b9197d38649d08dfb517471e730e0af91903ee19dad0ebb72fa2aaae4931d57e0819d276f47e122979f34cf8bd668e3ebd6e7236ee3f690d873889b5f3e3b199de232e01348b6d0d930958d4e16edbbca2050308d43c2f36e16743d50730c1835ea68e7e3de13234355061c72ce228383930cc10410705902e34333682a6c0d8a7658a88209e73d2c68152bbee0af3b12af77364f7d2a58b17f39cb0"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

[ 3496.721896][ T3201] xt_CT: No such helper "snmp_trap"
11:51:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x43e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x280, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410)

11:51:45 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

11:51:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x43e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x280, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410)

11:51:45 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

[ 3497.664905][ T3218] xt_CT: No such helper "snmp_trap"
11:51:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x43e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x280, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410)

[ 3497.828763][ T3223] xt_CT: No such helper "snmp_trap"
11:51:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x43e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x280, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410)

[ 3498.787608][ T3234] xt_CT: No such helper "snmp_trap"
11:51:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x43e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x280, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410)

11:51:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x43e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x3b4, 0x0, 0x0, 0x148, 0x280, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xcd}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410)

[ 3499.290672][ T3240] xt_CT: No such helper "snmp_trap"
[ 3499.528175][ T3245] xt_CT: No such helper "snmp_trap"
11:51:48 executing program 3:
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r1 = dup(r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/166, 0xa6, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0x8a000)

[ 3499.806764][ T3249] xt_CT: No such helper "snmp_trap"
11:51:48 executing program 2:
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @dev, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0)

11:51:48 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

11:51:48 executing program 3:
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r1 = dup(r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/166, 0xa6, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0x8a000)

11:51:48 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

11:51:51 executing program 3:
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r1 = dup(r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/166, 0xa6, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0x8a000)

11:51:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/13, 0xd}], 0x1}}], 0x1, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000640)=@gcm_256={{0x303}, "462fe3ed7306f5f9", "b1c3249cb6e612ca28cac1e1875637f2c4c70900fd37d0c9aef619f7406b1d0b", "0000ffe8", "c3ac2472cad444b1"}, 0x38)
recvmmsg(r0, &(0x7f0000001600), 0x3fffffffffffe31, 0x44d, 0x0)

11:51:51 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

11:51:51 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x70, 0x0, &(0x7f00000005c0))

11:51:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x277}]})

11:51:51 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r5 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r6, 0x58, &(0x7f0000001540)}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x2, 0x5, 0xc, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64=r9, @ANYBLOB="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"])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64=r9, @ANYBLOB="050000000000000006000000000000c390f200ff0300000000000003800000000000000700000000000000ff01000000000000c0cc00000700000000000080080000000100000000000000020000000000000005000000000000000000010000000000400000000000000000004d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000ad96068b20e6fe027b27abcfaf582a64731d8be3a70ca9902fff08af66ad945c477f30af11d62edc60fa44754b84e5"])
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6c060000)

11:51:51 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x70, 0x0, &(0x7f00000005c0))

11:51:51 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='pagemap\x00')
lseek(r0, 0x0, 0x3)

11:51:51 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x70, 0x0, &(0x7f00000005c0))

11:51:51 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='pagemap\x00')
lseek(r0, 0x0, 0x3)

11:51:51 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x70, 0x0, &(0x7f00000005c0))

11:51:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x277}]})

11:51:52 executing program 3:
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r1 = dup(r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/166, 0xa6, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0x8a000)

11:51:52 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:52 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='pagemap\x00')
lseek(r0, 0x0, 0x3)

11:51:52 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:52 executing program 4:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2f}, 0x94)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="fd24cb91035ff06afc48cc633a1a5fdb19b30a478b9f14"])

11:51:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x277}]})

11:51:52 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='pagemap\x00')
lseek(r0, 0x0, 0x3)

11:51:52 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000003c0)=@ethtool_gstrings={0x1b, 0x1}})

11:51:52 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:52 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x277}]})

11:51:52 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000003c0)=@ethtool_gstrings={0x1b, 0x1}})

11:51:52 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000003c0)=@ethtool_gstrings={0x1b, 0x1}})

[ 3504.642124][ T9910] usb 5-1: new high-speed USB device number 18 using dummy_hcd
11:51:53 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:53 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000003c0)=@ethtool_gstrings={0x1b, 0x1}})

11:51:53 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

[ 3504.882174][ T9910] usb 5-1: Using ep0 maxpacket: 16
[ 3505.002420][ T9910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3505.023343][ T9910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3505.052143][ T9910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3505.062388][ T9910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3505.082264][ T9910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3505.192466][ T9910] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3505.201765][ T9910] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3505.210961][ T9910] usb 5-1: Manufacturer: syz
[ 3505.223164][ T9910] usb 5-1: config 0 descriptor??
[ 3505.592543][ T9910] rc_core: IR keymap rc-hauppauge not found
[ 3505.598654][ T9910] Registered IR keymap rc-empty
[ 3505.609491][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3505.652330][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3505.692822][ T9910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 3505.723841][ T9910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input392
[ 3505.757850][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3505.792150][    C0] mceusb 5-1:0.0: long-range (0x30) receiver active
[ 3505.802309][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3505.832238][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3505.862282][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3505.892222][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3505.922285][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3505.952253][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3505.982319][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3506.012213][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3506.042188][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3506.073485][ T9910] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 3506.081636][ T9910] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x30 active)
[ 3506.186677][T29806] usb 5-1: USB disconnect, device number 18
11:51:55 executing program 4:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2f}, 0x94)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="fd24cb91035ff06afc48cc633a1a5fdb19b30a478b9f14"])

11:51:55 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:55 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:55 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040))

11:51:55 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:55 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:55 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040))

11:51:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x02\x00\x00'}]}, 0x18}], 0x1}, 0x0)

11:51:55 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000005c0)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000017f0000010000000002"], 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2809302060a00fd41fd010e0900000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5928e1baac968300000000f2ff00000000", 0xfd99}], 0x1, 0x0, 0x0, 0x7a000000}, 0x840)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x66, 0x3, 0x5c}]}, 0x10)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

[ 3507.113251][T29806] usb 5-1: new high-speed USB device number 19 using dummy_hcd
11:51:55 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:55 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

[ 3507.207129][ T3385] validate_nla: 8 callbacks suppressed
[ 3507.207151][ T3385] netlink: 'syz-executor.5': attribute type 4 has an invalid length.
11:51:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x02\x00\x00'}]}, 0x18}], 0x1}, 0x0)

[ 3507.402228][T29806] usb 5-1: Using ep0 maxpacket: 16
[ 3507.532777][T29806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3507.552133][T29806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3507.572083][T29806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3507.583747][T29806] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3507.594562][T29806] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3507.682829][T29806] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3507.712070][T29806] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3507.720151][T29806] usb 5-1: Manufacturer: syz
[ 3507.728312][T29806] usb 5-1: config 0 descriptor??
[ 3508.112560][T29806] rc_core: IR keymap rc-hauppauge not found
[ 3508.118632][T29806] Registered IR keymap rc-empty
[ 3508.124191][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.152254][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.182900][T29806] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 3508.213795][T29806] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input393
[ 3508.247602][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.282209][    C1] mceusb 5-1:0.0: long-range (0x30) receiver active
[ 3508.289063][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.332779][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.373268][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.402608][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.442628][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.483434][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.512796][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.552753][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.582708][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3508.624965][T29806] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 3508.633508][T29806] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x30 active)
[ 3508.728830][ T9910] usb 5-1: USB disconnect, device number 19
11:51:57 executing program 4:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2f}, 0x94)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="fd24cb91035ff06afc48cc633a1a5fdb19b30a478b9f14"])

11:51:57 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000005c0)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000017f0000010000000002"], 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2809302060a00fd41fd010e0900000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5928e1baac968300000000f2ff00000000", 0xfd99}], 0x1, 0x0, 0x0, 0x7a000000}, 0x840)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x66, 0x3, 0x5c}]}, 0x10)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

11:51:57 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040))

11:51:57 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000005c0)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000017f0000010000000002"], 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2809302060a00fd41fd010e0900000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5928e1baac968300000000f2ff00000000", 0xfd99}], 0x1, 0x0, 0x0, 0x7a000000}, 0x840)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x66, 0x3, 0x5c}]}, 0x10)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

11:51:57 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x02\x00\x00'}]}, 0x18}], 0x1}, 0x0)

11:51:57 executing program 3:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000152000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000308000/0x3000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x20000000, 0x4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x4, 0x1}}, 0x26)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f000019b000/0x4000)=nil, &(0x7f0000419000/0x3000)=nil, &(0x7f0000570000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00004be000/0x3000)=nil, &(0x7f00001bf000/0x4000)=nil, &(0x7f000020e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00008a2000/0x4000)=nil, &(0x7f0000434000/0x13000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000000080)="06c95c7d6dd0ba7efbf672774c64870e4061b86a701a3e370238321c6e0ed6edd43443a90618fd68d7ec7c4ad57a94b9549ba1ae481dabeb31240d819573ab46b3922fc2a6e533764dce1f7f976dd7acba52a5c78e527913598bba6bf5a58583e3bd478074f3e9ddef0dd261a506b5f7d091d94df5e29cc26e26e3524a233cca32613b5acafefddcea788568a64a365d1fc354c0d37bf10896157c6eaa9b62beedac1cfded12a79d390db8cb3298dea303c8ab8946910c2d1304d1523f4d111dab35d759065b04bab8efe0c09923a9cffd0042c5a011d57a5ed9f0ad66e70c5e47ec72250f19e8ccc31146ae24", 0xed, r2}, 0x68)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000480)="6565650f01c5640f300f01c9b82a000f00d0f20f1ec90f792536660ff2e10f015fe7fa0fc76bf4", 0x27}], 0x1, 0x20, &(0x7f0000000500)=[@efer={0x2, 0x400}, @dstype3={0x7, 0x4}], 0x2)
mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82783000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7f, 0x2, 0xfffffff9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f00, 0x80, 0x400, 0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000080000c145b0eb1fca1f2a0000fbdbdf250a000000000004", @ANYRES32=r9, @ANYBLOB="08000100010000000400090008000a00020000000400090008000a000100000004000b000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8081}, 0x24004845)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)

11:51:57 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x02\x00\x00'}]}, 0x18}], 0x1}, 0x0)

[ 3509.285847][ T3402] netlink: 'syz-executor.5': attribute type 4 has an invalid length.
[ 3509.323784][ T3409] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
11:51:57 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000005c0)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000017f0000010000000002"], 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2809302060a00fd41fd010e0900000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5928e1baac968300000000f2ff00000000", 0xfd99}], 0x1, 0x0, 0x0, 0x7a000000}, 0x840)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x66, 0x3, 0x5c}]}, 0x10)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

11:51:57 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000005c0)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000017f0000010000000002"], 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2809302060a00fd41fd010e0900000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5928e1baac968300000000f2ff00000000", 0xfd99}], 0x1, 0x0, 0x0, 0x7a000000}, 0x840)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x66, 0x3, 0x5c}]}, 0x10)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

11:51:57 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040))

11:51:57 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='consume_skb\x00'}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xb)
mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x3000001, 0x10012, r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000300), 0x55)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10)
recvmmsg$unix(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x3fffffffffffca8, 0x2001, 0x0)

[ 3509.436228][ T3417] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
11:51:57 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000005c0)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000017f0000010000000002"], 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2809302060a00fd41fd010e0900000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5928e1baac968300000000f2ff00000000", 0xfd99}], 0x1, 0x0, 0x0, 0x7a000000}, 0x840)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x66, 0x3, 0x5c}]}, 0x10)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

[ 3509.501838][ T3420] netlink: 'syz-executor.5': attribute type 4 has an invalid length.
[ 3509.572334][ T9910] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 3509.635905][ T3425] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[ 3509.832755][ T9910] usb 5-1: Using ep0 maxpacket: 16
[ 3509.952528][ T9910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3509.962991][ T9910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3509.974000][ T9910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3509.983876][ T9910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3509.995168][ T9910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3510.082324][ T9910] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3510.091613][ T9910] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3510.099874][ T9910] usb 5-1: Manufacturer: syz
[ 3510.115067][ T9910] usb 5-1: config 0 descriptor??
[ 3510.442323][ T9910] rc_core: IR keymap rc-hauppauge not found
[ 3510.448292][ T9910] Registered IR keymap rc-empty
[ 3510.453826][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.482317][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.516373][ T9910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 3510.541526][ T9910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input394
[ 3510.557026][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.594114][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.612166][    C0] mceusb 5-1:0.0: long-range (0x30) receiver active
[ 3510.628229][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.662603][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.692291][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.732219][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.762315][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.792808][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.822269][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.852418][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3510.883423][ T9910] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 3510.891960][ T9910] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x30 active)
[ 3511.015653][ T9910] usb 5-1: USB disconnect, device number 20
11:51:59 executing program 4:
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2f}, 0x94)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="fd24cb91035ff06afc48cc633a1a5fdb19b30a478b9f14"])

11:51:59 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='consume_skb\x00'}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xb)
mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x3000001, 0x10012, r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000300), 0x55)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10)
recvmmsg$unix(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x3fffffffffffca8, 0x2001, 0x0)

11:51:59 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000005c0)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000017f0000010000000002"], 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2809302060a00fd41fd010e0900000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5928e1baac968300000000f2ff00000000", 0xfd99}], 0x1, 0x0, 0x0, 0x7a000000}, 0x840)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x66, 0x3, 0x5c}]}, 0x10)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

11:51:59 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000c80), 0x7, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @capture={0x0, 0x0, {0x0, 0x59455247}}})

11:51:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0)

11:51:59 executing program 0:
r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0x40187014, 0x0)

11:51:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0)

[ 3511.562268][ T3430] netlink: 'syz-executor.5': attribute type 4 has an invalid length.
11:52:00 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000c80), 0x7, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @capture={0x0, 0x0, {0x0, 0x59455247}}})

11:52:00 executing program 0:
r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0x40187014, 0x0)

11:52:00 executing program 5:
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x1}, 0x18)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000000600)=[{{0x0, 0x2, &(0x7f0000001140)=[{&(0x7f00000010c0)="8434a5064d4a95", 0x7}], 0x1}}], 0x2, 0x0)

11:52:00 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000c80), 0x7, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @capture={0x0, 0x0, {0x0, 0x59455247}}})

11:52:00 executing program 0:
r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0x40187014, 0x0)

[ 3511.902126][T29806] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 3512.142200][T29806] usb 5-1: Using ep0 maxpacket: 16
[ 3512.234034][ T1216] ieee802154 phy0 wpan0: encryption failed: -22
[ 3512.240569][ T1216] ieee802154 phy1 wpan1: encryption failed: -22
[ 3512.282598][T29806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3512.295512][T29806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3512.307277][T29806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3512.317610][T29806] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3512.328286][T29806] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3512.412752][T29806] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3512.422051][T29806] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3512.430150][T29806] usb 5-1: Manufacturer: syz
[ 3512.439108][T29806] usb 5-1: config 0 descriptor??
[ 3512.772199][T29806] rc_core: IR keymap rc-hauppauge not found
[ 3512.778328][T29806] Registered IR keymap rc-empty
[ 3512.784680][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3512.822389][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3512.863341][T29806] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 3512.880424][T29806] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input395
[ 3512.896794][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3512.932229][    C1] mceusb 5-1:0.0: long-range (0x30) receiver active
[ 3512.939391][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3512.972779][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3513.002738][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3513.032918][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3513.072847][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3513.112822][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3513.152677][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3513.193178][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3513.233095][T29806] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3513.265366][T29806] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 3513.273716][T29806] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x30 active)
[ 3513.357373][T29806] usb 5-1: USB disconnect, device number 21
11:52:02 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0)

11:52:02 executing program 5:
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x1}, 0x18)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000000600)=[{{0x0, 0x2, &(0x7f0000001140)=[{&(0x7f00000010c0)="8434a5064d4a95", 0x7}], 0x1}}], 0x2, 0x0)

11:52:02 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000c80), 0x7, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @capture={0x0, 0x0, {0x0, 0x59455247}}})

11:52:02 executing program 0:
r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0x40187014, 0x0)

11:52:02 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='consume_skb\x00'}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xb)
mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x3000001, 0x10012, r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000300), 0x55)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10)
recvmmsg$unix(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x3fffffffffffca8, 0x2001, 0x0)

11:52:02 executing program 5:
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x1}, 0x18)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000000600)=[{{0x0, 0x2, &(0x7f0000001140)=[{&(0x7f00000010c0)="8434a5064d4a95", 0x7}], 0x1}}], 0x2, 0x0)

11:52:02 executing program 0:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0))
r0 = semget$private(0x0, 0x4, 0x0)
semctl$GETALL(r0, 0x0, 0xd, 0x0)

11:52:02 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0)

11:52:02 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0)

11:52:02 executing program 3:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@host}, 0x0, 0x1})

11:52:02 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0)

11:52:02 executing program 0:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0))
r0 = semget$private(0x0, 0x4, 0x0)
semctl$GETALL(r0, 0x0, 0xd, 0x0)

11:52:02 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @rr={0x7, 0x3}]}}}], 0x18}}], 0x1, 0x0)

11:52:02 executing program 5:
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x1}, 0x18)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000000600)=[{{0x0, 0x2, &(0x7f0000001140)=[{&(0x7f00000010c0)="8434a5064d4a95", 0x7}], 0x1}}], 0x2, 0x0)

11:52:02 executing program 3:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@host}, 0x0, 0x1})

11:52:02 executing program 0:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0))
r0 = semget$private(0x0, 0x4, 0x0)
semctl$GETALL(r0, 0x0, 0xd, 0x0)

11:52:02 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='consume_skb\x00'}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xb)
mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x3000001, 0x10012, r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000300), 0x55)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10)
recvmmsg$unix(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x3fffffffffffca8, 0x2001, 0x0)

11:52:02 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @rr={0x7, 0x3}]}}}], 0x18}}], 0x1, 0x0)

11:52:02 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0)

11:52:02 executing program 3:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@host}, 0x0, 0x1})

11:52:02 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')
getdents(r0, 0x0, 0x0)

11:52:02 executing program 0:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0))
r0 = semget$private(0x0, 0x4, 0x0)
semctl$GETALL(r0, 0x0, 0xd, 0x0)

11:52:02 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @rr={0x7, 0x3}]}}}], 0x18}}], 0x1, 0x0)

11:52:02 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0)

11:52:02 executing program 3:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@host}, 0x0, 0x1})

11:52:02 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r4 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000980))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x0, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x20000000}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64])
unshare(0x42040600)

11:52:02 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')
getdents(r0, 0x0, 0x0)

11:52:02 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @rr={0x7, 0x3}]}}}], 0x18}}], 0x1, 0x0)

11:52:03 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')
getdents(r0, 0x0, 0x0)

11:52:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x400})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x0, 0x0})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912})

11:52:03 executing program 4:
r0 = epoll_create(0xf9)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x28280, 0x0)
dup2(r0, r1)

11:52:03 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
socket(0x0, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x8)

11:52:03 executing program 1:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11:52:03 executing program 4:
r0 = epoll_create(0xf9)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x28280, 0x0)
dup2(r0, r1)

11:52:03 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')
getdents(r0, 0x0, 0x0)

11:52:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x400})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x0, 0x0})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912})

11:52:03 executing program 4:
r0 = epoll_create(0xf9)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x28280, 0x0)
dup2(r0, r1)

[ 3515.272172][T29806] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 3515.692423][T29806] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 3515.708036][T29806] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3515.733116][T29806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
11:52:04 executing program 4:
r0 = epoll_create(0xf9)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x28280, 0x0)
dup2(r0, r1)

11:52:04 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

11:52:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x400})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x0, 0x0})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912})

11:52:04 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x541b, 0x0)

11:52:04 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r4 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000980))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x0, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x20000000}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ffffffff080002000000000014000142d67e982f202bf4000000000000000000080002000c000000522ce37eb2284df6d60912718f2b0fe1f36e39dc87c5969e2b80c666af86bbffd71a5bbd91823d2b2471d5a2cb0523cf4a76ec789489644bd8c8da8f2d8af71de6f426831bd3043578c5f2815270e4c8dc1eb60299a8d3eea429edf7b3e7307fa6e2a7f44977aefd66d2b1d62a64000e41383ccc2a931ab4751ddf149c49686cbbd97de4a30093258fe71d0d357281a9ec4ec6d5ebd1df77f72ceb45f7aaac8b68e2e5ae9b31f2bf4036d72be30544d3f033e2606cfc3eae5a72643202e91de6833e9b1071f5d586539cab2faddb5b2c7b65a17174a64ad33437406629b24e19c9ea4723543475b446e8779cdc0b6bb9842d0803868a58c583"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64])
unshare(0x42040600)

11:52:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x54}}, 0x0)

11:52:04 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x541b, 0x0)

[ 3515.992405][T29806] usb 2-1: string descriptor 0 read error: -22
[ 3515.998865][T29806] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3516.016364][ T3550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3516.031664][T29806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3516.115349][T29806] usb 2-1: 0:2 : does not exist
[ 3516.319833][T15562] usb 2-1: USB disconnect, device number 38
11:52:05 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x400})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x0, 0x0})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912})

11:52:05 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x541b, 0x0)

11:52:05 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x541b, 0x0)

11:52:05 executing program 1:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11:52:05 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x541b, 0x0)

11:52:05 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x541b, 0x0)

[ 3517.442669][T29806] usb 2-1: new high-speed USB device number 39 using dummy_hcd
11:52:05 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

11:52:05 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x541b, 0x0)

[ 3517.832408][T29806] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 3517.842211][T29806] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3517.860531][T29806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
11:52:06 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r4 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000980))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x0, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x20000000}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64])
unshare(0x42040600)

[ 3518.132468][T29806] usb 2-1: string descriptor 0 read error: -22
[ 3518.138753][T29806] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3518.202541][T29806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3518.296525][T29806] usb 2-1: 0:2 : does not exist
[ 3518.647202][T29806] usb 2-1: USB disconnect, device number 39
11:52:07 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

11:52:07 executing program 1:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[ 3519.532176][T29806] usb 2-1: new high-speed USB device number 40 using dummy_hcd
11:52:08 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r4 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000100)={0x0, 0xf7b5, 0x0, 0x2, 0x163}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000980))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x0, 0x4, 0x8}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x20000000}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000007c0)=ANY=[@ANYRES64])
unshare(0x42040600)

11:52:08 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

11:52:08 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

11:52:08 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x11}}}]}, 0x48}}, 0x0)

[ 3519.892408][T29806] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 3519.910188][T29806] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
11:52:08 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x11}}}]}, 0x48}}, 0x0)

[ 3520.077185][T29806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
11:52:08 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x11}}}]}, 0x48}}, 0x0)

[ 3520.442479][T29806] usb 2-1: string descriptor 0 read error: -22
[ 3520.449420][T29806] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3520.495169][T29806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
11:52:09 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x11}}}]}, 0x48}}, 0x0)

[ 3520.676971][T29806] usb 2-1: 0:2 : does not exist
11:52:09 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000001380)={'veth0_vlan\x00', 0x48})

[ 3521.048606][T30580] usb 2-1: USB disconnect, device number 40
11:52:09 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000001380)={'veth0_vlan\x00', 0x48})

11:52:09 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000001380)={'veth0_vlan\x00', 0x48})

11:52:10 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

11:52:10 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000001380)={'veth0_vlan\x00', 0x48})

11:52:10 executing program 1:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11:52:10 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

11:52:10 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

11:52:10 executing program 4:
r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

11:52:10 executing program 0:
keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0)

11:52:10 executing program 0:
keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0)

11:52:10 executing program 4:
r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

11:52:11 executing program 4:
r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

[ 3522.582572][T29806] usb 2-1: new high-speed USB device number 41 using dummy_hcd
11:52:11 executing program 0:
keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0)

11:52:11 executing program 4:
r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

[ 3522.993011][T29806] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 3523.004079][T29806] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3523.014512][T29806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3523.292640][T29806] usb 2-1: string descriptor 0 read error: -22
[ 3523.310178][T29806] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3523.349764][T29806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3523.575368][T29806] usb 2-1: 0:2 : does not exist
[ 3523.860921][T29806] usb 2-1: USB disconnect, device number 41
11:52:12 executing program 0:
keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0)

11:52:12 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00'})

11:52:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000480)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x11, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="42cc1a7cf4"]}]}, 0x24}], 0x1}, 0x0)

11:52:12 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

[ 3524.436457][ T3680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:52:12 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000040840)=ANY=[@ANYRES64=<r4=>0x0])
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xf000, 0x96000})
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000280)=0x8b)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x20040000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000418c0)={0xc7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x3, "427e718c94715a"})
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x66, "0aa78fc559522d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r7}, {r8}, {r9}], 0x7, "14b3189ffd5c99"})
r10 = gettid()
process_vm_writev(r10, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_connect)

11:52:12 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00'})

11:52:12 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

11:52:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000480)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x11, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="42cc1a7cf4"]}]}, 0x24}], 0x1}, 0x0)

11:52:12 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@dev}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, [@tmpl={0x44, 0x5, [{{@in6=@local}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x1, 0x0, 0x28}]}]}, 0x16c}}, 0x0)

[ 3524.583161][ T3684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
11:52:13 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00'})

[ 3524.627113][   T27] audit: type=1326 audit(1688298733.011:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3687 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[ 3524.663044][ T3691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:52:13 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

11:52:13 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@dev}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, [@tmpl={0x44, 0x5, [{{@in6=@local}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x1, 0x0, 0x28}]}]}, 0x16c}}, 0x0)

[ 3524.745147][   T27] audit: type=1326 audit(1688298733.041:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3687 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=239 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[ 3524.829761][ T3696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
11:52:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000480)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x11, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="42cc1a7cf4"]}]}, 0x24}], 0x1}, 0x0)

[ 3524.892578][   T27] audit: type=1326 audit(1688298733.041:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3687 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
11:52:13 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[ 3524.920821][   T27] audit: type=1326 audit(1688298733.041:6294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3687 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[ 3524.957129][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3524.966723][   T27] audit: type=1326 audit(1688298733.271:6295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3694 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
11:52:13 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00'})

[ 3525.179753][   T27] audit: type=1326 audit(1688298733.271:6296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3694 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[ 3525.272913][   T27] audit: type=1326 audit(1688298733.341:6297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3694 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=239 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[ 3525.353356][   T27] audit: type=1326 audit(1688298733.341:6298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3694 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[ 3525.376762][   T27] audit: type=1326 audit(1688298733.341:6299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3694 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[ 3525.402753][   T27] audit: type=1326 audit(1688298733.481:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3703 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
11:52:14 executing program 4:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000480)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x11, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="42cc1a7cf4"]}]}, 0x24}], 0x1}, 0x0)

11:52:14 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@dev}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, [@tmpl={0x44, 0x5, [{{@in6=@local}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x1, 0x0, 0x28}]}]}, 0x16c}}, 0x0)

11:52:14 executing program 2:
r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x3c80}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)

11:52:14 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

11:52:14 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0)

[ 3526.331093][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
11:52:14 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@dev}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, [@tmpl={0x44, 0x5, [{{@in6=@local}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x1, 0x0, 0x28}]}]}, 0x16c}}, 0x0)

[ 3526.395777][ T3718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:52:14 executing program 0:
syz_emit_ethernet(0x36, &(0x7f00000004c0)={@multicast, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

11:52:14 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0)

11:52:14 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
close(r1)

11:52:14 executing program 1:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x1}, [""]}, 0x18}}, 0x4041)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="a22cdd7e4a1fe73a770248e0de2771f102a2385dc02c656b8f9b3698a0caa0f975697a9ad8e17d7f59ec633bbc574f53263d4917ca8a1e5a807aa687ba498bc763bf42d27f1952f101880f82f45da143a66a2b7fd5804e11fb890a0f1639d2e6167a044274"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
getpriority(0x0, 0x0)
r2 = getpgid(0x0)
getpgid(r2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x2)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
timer_create(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x18004841)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000740)={{}, {0x77359400}}, &(0x7f0000000780))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
mq_open(&(0x7f0000000380)='\x02Y\xf2\xfak\x1c~\xc9\xc4K\xf9\xe4Nj\xcb\xff\xdax\x01\xc4\xabM\x9f\x86\xe6\x88\xe2\x9cu\xd5\x00\xd0\x9f\x84\r$\xf0^h\x05\xd2{\x8ce\x16\r\x02?\xfc\xe3[\x05T\x96\x7f\x8a*\xe3*w\x06$\x91\x17\xed\f\xdb\xf88J\x9f\xe0\xb6\xd7\xd9C\x0f!\xc5\xfcG\x84R\x19n\xce\xb5\x90\xf4\x0e>B\xe9\xbb\xc0\xd22\xa1D\xcd\x8a\x15\x95\xbf\xdcw\xa2\x1f\xdf\xbc\xce?\x90\xb0\xf9\xf4\x8d\xc1ER\x83b\xc4v\x0ft\x19\xc9\x1f\x91\xb6\x1a\xbd&|x+\x1dV\xf5\xbf\xdf\xdb\xbbN\x17=\xc4\xd1{1p\xc6\xa7\xecG\x13WC\xe3\x9b\x10\x9be\x9e\xa9yr4C\xdf/\x9b\xf4\xd1\xa0FQ\x06\x8e\x80W\x14\xcc\xb5h\x82\x8a\xd3!\x01\xb5\xd8\xd4\xfe\xb3\xc0tTBr\x1b\xda\xce\xb86\xd7\x81\x9d\x9f[#Rh(\xf4\x00\x18P\x9e\xdeK\x93\xd6\xe2\x00\xe0@\xb2\xb5\xfc\xc1E\xf6\xb8\xa1(\x94\xa9\xfc\x15(\xb9\xe5\xd7\xf5%\xdf\x1d\x06<h\x81\xc4F\xec\x84w\xf6\xd4\x03\x89N\xa5\xb3\xb0.\xf5\xc5\x85\xc8\x04=\xa6\xbbt\xf3mq\xddteT4\x80\xc1o90\x17\xa7i\xf3\xd4l\x16\x05\x97\x91\x8e*\xd4a\x12\f\x99\x80p\xd1\xc0\x96\x80\xc06F9\x8e\xbb4\xbaB\xb2EvJx\x14&3[{\x86\xdc4cm\xc12\xde\xdd\xd2>\x8f\f\x16\x06aL\xc6\"\xee\xde\xcf{K\n\xae\xd8\x98[\x18;\xec\x99\x00'/378, 0x40, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x8})
sendfile(r3, r4, 0x0, 0x80000022)

11:52:15 executing program 0:
syz_emit_ethernet(0x36, &(0x7f00000004c0)={@multicast, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

[ 3526.467713][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
11:52:15 executing program 4:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:15 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0)

11:52:15 executing program 0:
syz_emit_ethernet(0x36, &(0x7f00000004c0)={@multicast, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

11:52:15 executing program 2:
r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x3c80}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)

11:52:15 executing program 1:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x1}, [""]}, 0x18}}, 0x4041)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="a22cdd7e4a1fe73a770248e0de2771f102a2385dc02c656b8f9b3698a0caa0f975697a9ad8e17d7f59ec633bbc574f53263d4917ca8a1e5a807aa687ba498bc763bf42d27f1952f101880f82f45da143a66a2b7fd5804e11fb890a0f1639d2e6167a044274"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
getpriority(0x0, 0x0)
r2 = getpgid(0x0)
getpgid(r2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x2)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
timer_create(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x18004841)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000740)={{}, {0x77359400}}, &(0x7f0000000780))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
mq_open(&(0x7f0000000380)='\x02Y\xf2\xfak\x1c~\xc9\xc4K\xf9\xe4Nj\xcb\xff\xdax\x01\xc4\xabM\x9f\x86\xe6\x88\xe2\x9cu\xd5\x00\xd0\x9f\x84\r$\xf0^h\x05\xd2{\x8ce\x16\r\x02?\xfc\xe3[\x05T\x96\x7f\x8a*\xe3*w\x06$\x91\x17\xed\f\xdb\xf88J\x9f\xe0\xb6\xd7\xd9C\x0f!\xc5\xfcG\x84R\x19n\xce\xb5\x90\xf4\x0e>B\xe9\xbb\xc0\xd22\xa1D\xcd\x8a\x15\x95\xbf\xdcw\xa2\x1f\xdf\xbc\xce?\x90\xb0\xf9\xf4\x8d\xc1ER\x83b\xc4v\x0ft\x19\xc9\x1f\x91\xb6\x1a\xbd&|x+\x1dV\xf5\xbf\xdf\xdb\xbbN\x17=\xc4\xd1{1p\xc6\xa7\xecG\x13WC\xe3\x9b\x10\x9be\x9e\xa9yr4C\xdf/\x9b\xf4\xd1\xa0FQ\x06\x8e\x80W\x14\xcc\xb5h\x82\x8a\xd3!\x01\xb5\xd8\xd4\xfe\xb3\xc0tTBr\x1b\xda\xce\xb86\xd7\x81\x9d\x9f[#Rh(\xf4\x00\x18P\x9e\xdeK\x93\xd6\xe2\x00\xe0@\xb2\xb5\xfc\xc1E\xf6\xb8\xa1(\x94\xa9\xfc\x15(\xb9\xe5\xd7\xf5%\xdf\x1d\x06<h\x81\xc4F\xec\x84w\xf6\xd4\x03\x89N\xa5\xb3\xb0.\xf5\xc5\x85\xc8\x04=\xa6\xbbt\xf3mq\xddteT4\x80\xc1o90\x17\xa7i\xf3\xd4l\x16\x05\x97\x91\x8e*\xd4a\x12\f\x99\x80p\xd1\xc0\x96\x80\xc06F9\x8e\xbb4\xbaB\xb2EvJx\x14&3[{\x86\xdc4cm\xc12\xde\xdd\xd2>\x8f\f\x16\x06aL\xc6\"\xee\xde\xcf{K\n\xae\xd8\x98[\x18;\xec\x99\x00'/378, 0x40, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x8})
sendfile(r3, r4, 0x0, 0x80000022)

11:52:15 executing program 0:
syz_emit_ethernet(0x36, &(0x7f00000004c0)={@multicast, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

11:52:15 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0)

11:52:15 executing program 0:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:15 executing program 3:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:15 executing program 5:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:15 executing program 1:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x1}, [""]}, 0x18}}, 0x4041)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="a22cdd7e4a1fe73a770248e0de2771f102a2385dc02c656b8f9b3698a0caa0f975697a9ad8e17d7f59ec633bbc574f53263d4917ca8a1e5a807aa687ba498bc763bf42d27f1952f101880f82f45da143a66a2b7fd5804e11fb890a0f1639d2e6167a044274"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
getpriority(0x0, 0x0)
r2 = getpgid(0x0)
getpgid(r2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x2)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
timer_create(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x18004841)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000740)={{}, {0x77359400}}, &(0x7f0000000780))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
mq_open(&(0x7f0000000380)='\x02Y\xf2\xfak\x1c~\xc9\xc4K\xf9\xe4Nj\xcb\xff\xdax\x01\xc4\xabM\x9f\x86\xe6\x88\xe2\x9cu\xd5\x00\xd0\x9f\x84\r$\xf0^h\x05\xd2{\x8ce\x16\r\x02?\xfc\xe3[\x05T\x96\x7f\x8a*\xe3*w\x06$\x91\x17\xed\f\xdb\xf88J\x9f\xe0\xb6\xd7\xd9C\x0f!\xc5\xfcG\x84R\x19n\xce\xb5\x90\xf4\x0e>B\xe9\xbb\xc0\xd22\xa1D\xcd\x8a\x15\x95\xbf\xdcw\xa2\x1f\xdf\xbc\xce?\x90\xb0\xf9\xf4\x8d\xc1ER\x83b\xc4v\x0ft\x19\xc9\x1f\x91\xb6\x1a\xbd&|x+\x1dV\xf5\xbf\xdf\xdb\xbbN\x17=\xc4\xd1{1p\xc6\xa7\xecG\x13WC\xe3\x9b\x10\x9be\x9e\xa9yr4C\xdf/\x9b\xf4\xd1\xa0FQ\x06\x8e\x80W\x14\xcc\xb5h\x82\x8a\xd3!\x01\xb5\xd8\xd4\xfe\xb3\xc0tTBr\x1b\xda\xce\xb86\xd7\x81\x9d\x9f[#Rh(\xf4\x00\x18P\x9e\xdeK\x93\xd6\xe2\x00\xe0@\xb2\xb5\xfc\xc1E\xf6\xb8\xa1(\x94\xa9\xfc\x15(\xb9\xe5\xd7\xf5%\xdf\x1d\x06<h\x81\xc4F\xec\x84w\xf6\xd4\x03\x89N\xa5\xb3\xb0.\xf5\xc5\x85\xc8\x04=\xa6\xbbt\xf3mq\xddteT4\x80\xc1o90\x17\xa7i\xf3\xd4l\x16\x05\x97\x91\x8e*\xd4a\x12\f\x99\x80p\xd1\xc0\x96\x80\xc06F9\x8e\xbb4\xbaB\xb2EvJx\x14&3[{\x86\xdc4cm\xc12\xde\xdd\xd2>\x8f\f\x16\x06aL\xc6\"\xee\xde\xcf{K\n\xae\xd8\x98[\x18;\xec\x99\x00'/378, 0x40, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x8})
sendfile(r3, r4, 0x0, 0x80000022)

11:52:16 executing program 2:
r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x3c80}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)

11:52:17 executing program 1:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x1}, [""]}, 0x18}}, 0x4041)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="a22cdd7e4a1fe73a770248e0de2771f102a2385dc02c656b8f9b3698a0caa0f975697a9ad8e17d7f59ec633bbc574f53263d4917ca8a1e5a807aa687ba498bc763bf42d27f1952f101880f82f45da143a66a2b7fd5804e11fb890a0f1639d2e6167a044274"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
getpriority(0x0, 0x0)
r2 = getpgid(0x0)
getpgid(r2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x2)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
timer_create(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x18004841)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000740)={{}, {0x77359400}}, &(0x7f0000000780))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
mq_open(&(0x7f0000000380)='\x02Y\xf2\xfak\x1c~\xc9\xc4K\xf9\xe4Nj\xcb\xff\xdax\x01\xc4\xabM\x9f\x86\xe6\x88\xe2\x9cu\xd5\x00\xd0\x9f\x84\r$\xf0^h\x05\xd2{\x8ce\x16\r\x02?\xfc\xe3[\x05T\x96\x7f\x8a*\xe3*w\x06$\x91\x17\xed\f\xdb\xf88J\x9f\xe0\xb6\xd7\xd9C\x0f!\xc5\xfcG\x84R\x19n\xce\xb5\x90\xf4\x0e>B\xe9\xbb\xc0\xd22\xa1D\xcd\x8a\x15\x95\xbf\xdcw\xa2\x1f\xdf\xbc\xce?\x90\xb0\xf9\xf4\x8d\xc1ER\x83b\xc4v\x0ft\x19\xc9\x1f\x91\xb6\x1a\xbd&|x+\x1dV\xf5\xbf\xdf\xdb\xbbN\x17=\xc4\xd1{1p\xc6\xa7\xecG\x13WC\xe3\x9b\x10\x9be\x9e\xa9yr4C\xdf/\x9b\xf4\xd1\xa0FQ\x06\x8e\x80W\x14\xcc\xb5h\x82\x8a\xd3!\x01\xb5\xd8\xd4\xfe\xb3\xc0tTBr\x1b\xda\xce\xb86\xd7\x81\x9d\x9f[#Rh(\xf4\x00\x18P\x9e\xdeK\x93\xd6\xe2\x00\xe0@\xb2\xb5\xfc\xc1E\xf6\xb8\xa1(\x94\xa9\xfc\x15(\xb9\xe5\xd7\xf5%\xdf\x1d\x06<h\x81\xc4F\xec\x84w\xf6\xd4\x03\x89N\xa5\xb3\xb0.\xf5\xc5\x85\xc8\x04=\xa6\xbbt\xf3mq\xddteT4\x80\xc1o90\x17\xa7i\xf3\xd4l\x16\x05\x97\x91\x8e*\xd4a\x12\f\x99\x80p\xd1\xc0\x96\x80\xc06F9\x8e\xbb4\xbaB\xb2EvJx\x14&3[{\x86\xdc4cm\xc12\xde\xdd\xd2>\x8f\f\x16\x06aL\xc6\"\xee\xde\xcf{K\n\xae\xd8\x98[\x18;\xec\x99\x00'/378, 0x40, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x8})
sendfile(r3, r4, 0x0, 0x80000022)

11:52:17 executing program 4:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:17 executing program 2:
r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x3c80}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)

11:52:18 executing program 0:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:18 executing program 2:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:18 executing program 1:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x1}, [""]}, 0x18}}, 0x4041)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="a22cdd7e4a1fe73a770248e0de2771f102a2385dc02c656b8f9b3698a0caa0f975697a9ad8e17d7f59ec633bbc574f53263d4917ca8a1e5a807aa687ba498bc763bf42d27f1952f101880f82f45da143a66a2b7fd5804e11fb890a0f1639d2e6167a044274"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
getpriority(0x0, 0x0)
r2 = getpgid(0x0)
getpgid(r2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x2)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
timer_create(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x18004841)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000740)={{}, {0x77359400}}, &(0x7f0000000780))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
mq_open(&(0x7f0000000380)='\x02Y\xf2\xfak\x1c~\xc9\xc4K\xf9\xe4Nj\xcb\xff\xdax\x01\xc4\xabM\x9f\x86\xe6\x88\xe2\x9cu\xd5\x00\xd0\x9f\x84\r$\xf0^h\x05\xd2{\x8ce\x16\r\x02?\xfc\xe3[\x05T\x96\x7f\x8a*\xe3*w\x06$\x91\x17\xed\f\xdb\xf88J\x9f\xe0\xb6\xd7\xd9C\x0f!\xc5\xfcG\x84R\x19n\xce\xb5\x90\xf4\x0e>B\xe9\xbb\xc0\xd22\xa1D\xcd\x8a\x15\x95\xbf\xdcw\xa2\x1f\xdf\xbc\xce?\x90\xb0\xf9\xf4\x8d\xc1ER\x83b\xc4v\x0ft\x19\xc9\x1f\x91\xb6\x1a\xbd&|x+\x1dV\xf5\xbf\xdf\xdb\xbbN\x17=\xc4\xd1{1p\xc6\xa7\xecG\x13WC\xe3\x9b\x10\x9be\x9e\xa9yr4C\xdf/\x9b\xf4\xd1\xa0FQ\x06\x8e\x80W\x14\xcc\xb5h\x82\x8a\xd3!\x01\xb5\xd8\xd4\xfe\xb3\xc0tTBr\x1b\xda\xce\xb86\xd7\x81\x9d\x9f[#Rh(\xf4\x00\x18P\x9e\xdeK\x93\xd6\xe2\x00\xe0@\xb2\xb5\xfc\xc1E\xf6\xb8\xa1(\x94\xa9\xfc\x15(\xb9\xe5\xd7\xf5%\xdf\x1d\x06<h\x81\xc4F\xec\x84w\xf6\xd4\x03\x89N\xa5\xb3\xb0.\xf5\xc5\x85\xc8\x04=\xa6\xbbt\xf3mq\xddteT4\x80\xc1o90\x17\xa7i\xf3\xd4l\x16\x05\x97\x91\x8e*\xd4a\x12\f\x99\x80p\xd1\xc0\x96\x80\xc06F9\x8e\xbb4\xbaB\xb2EvJx\x14&3[{\x86\xdc4cm\xc12\xde\xdd\xd2>\x8f\f\x16\x06aL\xc6\"\xee\xde\xcf{K\n\xae\xd8\x98[\x18;\xec\x99\x00'/378, 0x40, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x8})
sendfile(r3, r4, 0x0, 0x80000022)

11:52:18 executing program 5:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:18 executing program 3:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:19 executing program 4:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:19 executing program 1:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x1}, [""]}, 0x18}}, 0x4041)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="a22cdd7e4a1fe73a770248e0de2771f102a2385dc02c656b8f9b3698a0caa0f975697a9ad8e17d7f59ec633bbc574f53263d4917ca8a1e5a807aa687ba498bc763bf42d27f1952f101880f82f45da143a66a2b7fd5804e11fb890a0f1639d2e6167a044274"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
getpriority(0x0, 0x0)
r2 = getpgid(0x0)
getpgid(r2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x2)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
timer_create(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x18004841)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000740)={{}, {0x77359400}}, &(0x7f0000000780))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
mq_open(&(0x7f0000000380)='\x02Y\xf2\xfak\x1c~\xc9\xc4K\xf9\xe4Nj\xcb\xff\xdax\x01\xc4\xabM\x9f\x86\xe6\x88\xe2\x9cu\xd5\x00\xd0\x9f\x84\r$\xf0^h\x05\xd2{\x8ce\x16\r\x02?\xfc\xe3[\x05T\x96\x7f\x8a*\xe3*w\x06$\x91\x17\xed\f\xdb\xf88J\x9f\xe0\xb6\xd7\xd9C\x0f!\xc5\xfcG\x84R\x19n\xce\xb5\x90\xf4\x0e>B\xe9\xbb\xc0\xd22\xa1D\xcd\x8a\x15\x95\xbf\xdcw\xa2\x1f\xdf\xbc\xce?\x90\xb0\xf9\xf4\x8d\xc1ER\x83b\xc4v\x0ft\x19\xc9\x1f\x91\xb6\x1a\xbd&|x+\x1dV\xf5\xbf\xdf\xdb\xbbN\x17=\xc4\xd1{1p\xc6\xa7\xecG\x13WC\xe3\x9b\x10\x9be\x9e\xa9yr4C\xdf/\x9b\xf4\xd1\xa0FQ\x06\x8e\x80W\x14\xcc\xb5h\x82\x8a\xd3!\x01\xb5\xd8\xd4\xfe\xb3\xc0tTBr\x1b\xda\xce\xb86\xd7\x81\x9d\x9f[#Rh(\xf4\x00\x18P\x9e\xdeK\x93\xd6\xe2\x00\xe0@\xb2\xb5\xfc\xc1E\xf6\xb8\xa1(\x94\xa9\xfc\x15(\xb9\xe5\xd7\xf5%\xdf\x1d\x06<h\x81\xc4F\xec\x84w\xf6\xd4\x03\x89N\xa5\xb3\xb0.\xf5\xc5\x85\xc8\x04=\xa6\xbbt\xf3mq\xddteT4\x80\xc1o90\x17\xa7i\xf3\xd4l\x16\x05\x97\x91\x8e*\xd4a\x12\f\x99\x80p\xd1\xc0\x96\x80\xc06F9\x8e\xbb4\xbaB\xb2EvJx\x14&3[{\x86\xdc4cm\xc12\xde\xdd\xd2>\x8f\f\x16\x06aL\xc6\"\xee\xde\xcf{K\n\xae\xd8\x98[\x18;\xec\x99\x00'/378, 0x40, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x8})
sendfile(r3, r4, 0x0, 0x80000022)

11:52:20 executing program 1:
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x1}, [""]}, 0x18}}, 0x4041)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="a22cdd7e4a1fe73a770248e0de2771f102a2385dc02c656b8f9b3698a0caa0f975697a9ad8e17d7f59ec633bbc574f53263d4917ca8a1e5a807aa687ba498bc763bf42d27f1952f101880f82f45da143a66a2b7fd5804e11fb890a0f1639d2e6167a044274"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
getpriority(0x0, 0x0)
r2 = getpgid(0x0)
getpgid(r2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x2)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
timer_create(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x18004841)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000740)={{}, {0x77359400}}, &(0x7f0000000780))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
mq_open(&(0x7f0000000380)='\x02Y\xf2\xfak\x1c~\xc9\xc4K\xf9\xe4Nj\xcb\xff\xdax\x01\xc4\xabM\x9f\x86\xe6\x88\xe2\x9cu\xd5\x00\xd0\x9f\x84\r$\xf0^h\x05\xd2{\x8ce\x16\r\x02?\xfc\xe3[\x05T\x96\x7f\x8a*\xe3*w\x06$\x91\x17\xed\f\xdb\xf88J\x9f\xe0\xb6\xd7\xd9C\x0f!\xc5\xfcG\x84R\x19n\xce\xb5\x90\xf4\x0e>B\xe9\xbb\xc0\xd22\xa1D\xcd\x8a\x15\x95\xbf\xdcw\xa2\x1f\xdf\xbc\xce?\x90\xb0\xf9\xf4\x8d\xc1ER\x83b\xc4v\x0ft\x19\xc9\x1f\x91\xb6\x1a\xbd&|x+\x1dV\xf5\xbf\xdf\xdb\xbbN\x17=\xc4\xd1{1p\xc6\xa7\xecG\x13WC\xe3\x9b\x10\x9be\x9e\xa9yr4C\xdf/\x9b\xf4\xd1\xa0FQ\x06\x8e\x80W\x14\xcc\xb5h\x82\x8a\xd3!\x01\xb5\xd8\xd4\xfe\xb3\xc0tTBr\x1b\xda\xce\xb86\xd7\x81\x9d\x9f[#Rh(\xf4\x00\x18P\x9e\xdeK\x93\xd6\xe2\x00\xe0@\xb2\xb5\xfc\xc1E\xf6\xb8\xa1(\x94\xa9\xfc\x15(\xb9\xe5\xd7\xf5%\xdf\x1d\x06<h\x81\xc4F\xec\x84w\xf6\xd4\x03\x89N\xa5\xb3\xb0.\xf5\xc5\x85\xc8\x04=\xa6\xbbt\xf3mq\xddteT4\x80\xc1o90\x17\xa7i\xf3\xd4l\x16\x05\x97\x91\x8e*\xd4a\x12\f\x99\x80p\xd1\xc0\x96\x80\xc06F9\x8e\xbb4\xbaB\xb2EvJx\x14&3[{\x86\xdc4cm\xc12\xde\xdd\xd2>\x8f\f\x16\x06aL\xc6\"\xee\xde\xcf{K\n\xae\xd8\x98[\x18;\xec\x99\x00'/378, 0x40, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x8})
sendfile(r3, r4, 0x0, 0x80000022)

11:52:20 executing program 0:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:20 executing program 5:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:20 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

11:52:20 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

11:52:20 executing program 2:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:21 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

11:52:21 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

11:52:21 executing program 3:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:21 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

11:52:21 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

11:52:21 executing program 4:
io_setup(0xff, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd2(0x0, 0x800)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="af1323ca92b214c8", 0x8}])

11:52:21 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

11:52:22 executing program 2:
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181101)
r1 = dup(r0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80a})
r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x90)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff)
r8 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105518, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x5, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r8, 0x0, 0x0, 'syz0\x00', 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
sched_setaffinity(r8, 0x8, &(0x7f0000000500))
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x19, 0x25, 0x140, 0xa0})

11:52:22 executing program 4:
io_setup(0xff, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd2(0x0, 0x800)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="af1323ca92b214c8", 0x8}])

11:52:22 executing program 1:
io_setup(0xff, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd2(0x0, 0x800)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="af1323ca92b214c8", 0x8}])

11:52:22 executing program 5:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "01000000000000000000f0ff0400"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x19)
splice(r2, 0x0, r0, 0x0, 0x3ff, 0x0)

11:52:22 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e)
connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @private}}, 0x1e)

11:52:22 executing program 5:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "01000000000000000000f0ff0400"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x19)
splice(r2, 0x0, r0, 0x0, 0x3ff, 0x0)

11:52:22 executing program 1:
io_setup(0xff, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd2(0x0, 0x800)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="af1323ca92b214c8", 0x8}])

11:52:23 executing program 1:
io_setup(0xff, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd2(0x0, 0x800)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="af1323ca92b214c8", 0x8}])

11:52:23 executing program 4:
io_setup(0xff, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd2(0x0, 0x800)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="af1323ca92b214c8", 0x8}])

11:52:23 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e)
connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @private}}, 0x1e)

11:52:23 executing program 5:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "01000000000000000000f0ff0400"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x19)
splice(r2, 0x0, r0, 0x0, 0x3ff, 0x0)

11:52:23 executing program 3:
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000780)=[{&(0x7f0000000540)="8a", 0x1}, {&(0x7f0000000740)="dc", 0x1}, {&(0x7f0000000040)="0141f5da19745cfcb5237b2f8300b1d2b7bd5829f4ae9ab1ed6ccb96e894c99445c1bc76eec66cba2d155ac9", 0x1}, {&(0x7f0000000000)="89", 0x1}, {&(0x7f0000000800)='(', 0xfe55}, {&(0x7f0000000cc0)='\'', 0x1}], 0x6, 0x0)
vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, 0x0)
close(r1)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0)

11:52:23 executing program 3:
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000780)=[{&(0x7f0000000540)="8a", 0x1}, {&(0x7f0000000740)="dc", 0x1}, {&(0x7f0000000040)="0141f5da19745cfcb5237b2f8300b1d2b7bd5829f4ae9ab1ed6ccb96e894c99445c1bc76eec66cba2d155ac9", 0x1}, {&(0x7f0000000000)="89", 0x1}, {&(0x7f0000000800)='(', 0xfe55}, {&(0x7f0000000cc0)='\'', 0x1}], 0x6, 0x0)
vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, 0x0)
close(r1)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0)

11:52:23 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e)
connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @private}}, 0x1e)

11:52:23 executing program 5:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "01000000000000000000f0ff0400"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x19)
splice(r2, 0x0, r0, 0x0, 0x3ff, 0x0)

11:52:23 executing program 4:
io_setup(0xff, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd2(0x0, 0x800)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="af1323ca92b214c8", 0x8}])

11:52:23 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a40)='nv\x00', 0x3)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080))

11:52:23 executing program 2:
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000780)=[{&(0x7f0000000540)="8a", 0x1}, {&(0x7f0000000740)="dc", 0x1}, {&(0x7f0000000040)="0141f5da19745cfcb5237b2f8300b1d2b7bd5829f4ae9ab1ed6ccb96e894c99445c1bc76eec66cba2d155ac9", 0x1}, {&(0x7f0000000000)="89", 0x1}, {&(0x7f0000000800)='(', 0xfe55}, {&(0x7f0000000cc0)='\'', 0x1}], 0x6, 0x0)
vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, 0x0)
close(r1)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0)

11:52:23 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a40)='nv\x00', 0x3)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080))

11:52:23 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x401c5820, &(0x7f0000000080)={{0x0, 0x9}})

11:52:23 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e)
connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @private}}, 0x1e)

11:52:23 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x401c5820, &(0x7f0000000080)={{0x0, 0x9}})

11:52:23 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a40)='nv\x00', 0x3)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080))

11:52:23 executing program 4:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:23 executing program 3:
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000780)=[{&(0x7f0000000540)="8a", 0x1}, {&(0x7f0000000740)="dc", 0x1}, {&(0x7f0000000040)="0141f5da19745cfcb5237b2f8300b1d2b7bd5829f4ae9ab1ed6ccb96e894c99445c1bc76eec66cba2d155ac9", 0x1}, {&(0x7f0000000000)="89", 0x1}, {&(0x7f0000000800)='(', 0xfe55}, {&(0x7f0000000cc0)='\'', 0x1}], 0x6, 0x0)
vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, 0x0)
close(r1)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0)

11:52:23 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x401c5820, &(0x7f0000000080)={{0x0, 0x9}})

11:52:24 executing program 2:
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000780)=[{&(0x7f0000000540)="8a", 0x1}, {&(0x7f0000000740)="dc", 0x1}, {&(0x7f0000000040)="0141f5da19745cfcb5237b2f8300b1d2b7bd5829f4ae9ab1ed6ccb96e894c99445c1bc76eec66cba2d155ac9", 0x1}, {&(0x7f0000000000)="89", 0x1}, {&(0x7f0000000800)='(', 0xfe55}, {&(0x7f0000000cc0)='\'', 0x1}], 0x6, 0x0)
vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, 0x0)
close(r1)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0)

11:52:24 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a40)='nv\x00', 0x3)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080))

11:52:24 executing program 0:
syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000735236088dee1ad923610000000109022d0001000010000904000003fe03010009058d1f0002000000090505021c9f7e000009058b1e20"], 0x0)

11:52:24 executing program 4:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:24 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x401c5820, &(0x7f0000000080)={{0x0, 0x9}})

11:52:24 executing program 1:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:24 executing program 3:
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000780)=[{&(0x7f0000000540)="8a", 0x1}, {&(0x7f0000000740)="dc", 0x1}, {&(0x7f0000000040)="0141f5da19745cfcb5237b2f8300b1d2b7bd5829f4ae9ab1ed6ccb96e894c99445c1bc76eec66cba2d155ac9", 0x1}, {&(0x7f0000000000)="89", 0x1}, {&(0x7f0000000800)='(', 0xfe55}, {&(0x7f0000000cc0)='\'', 0x1}], 0x6, 0x0)
vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, 0x0)
close(r1)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0)

11:52:24 executing program 2:
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000780)=[{&(0x7f0000000540)="8a", 0x1}, {&(0x7f0000000740)="dc", 0x1}, {&(0x7f0000000040)="0141f5da19745cfcb5237b2f8300b1d2b7bd5829f4ae9ab1ed6ccb96e894c99445c1bc76eec66cba2d155ac9", 0x1}, {&(0x7f0000000000)="89", 0x1}, {&(0x7f0000000800)='(', 0xfe55}, {&(0x7f0000000cc0)='\'', 0x1}], 0x6, 0x0)
vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, 0x0)
close(r1)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
splice(r0, 0x0, r1, 0x0, 0x80000000, 0x0)

11:52:24 executing program 5:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:24 executing program 3:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:24 executing program 1:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:24 executing program 2:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:24 executing program 4:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

[ 3536.012146][T30580] usb 1-1: new full-speed USB device number 48 using dummy_hcd
11:52:24 executing program 5:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

[ 3536.382278][T30580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10
[ 3536.393706][T30580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64
[ 3536.405298][T30580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 40732, setting to 64
[ 3536.416558][T30580] usb 1-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23
[ 3536.426143][T30580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3536.442264][T30580] usb 1-1: config 0 descriptor??
[ 3536.702302][T30580] usb 1-1: usb_control_msg returned -71
[ 3536.707955][T30580] usbtmc 1-1:0.0: can't read capabilities
[ 3536.733735][T30580] usb 1-1: USB disconnect, device number 48
11:52:25 executing program 0:
syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000735236088dee1ad923610000000109022d0001000010000904000003fe03010009058d1f0002000000090505021c9f7e000009058b1e20"], 0x0)

11:52:25 executing program 3:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:25 executing program 1:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:25 executing program 4:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:25 executing program 2:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:25 executing program 5:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:25 executing program 1:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:25 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

11:52:25 executing program 3:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

11:52:25 executing program 2:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:25 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

[ 3537.562499][ T4011] input: syz0 as /devices/virtual/input/input396
[ 3537.582196][T30580] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[ 3537.942644][T30580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10
[ 3537.954169][T30580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64
[ 3537.965758][T30580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 40732, setting to 64
[ 3537.983218][T30580] usb 1-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23
[ 3537.992921][T30580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3538.010698][T30580] usb 1-1: config 0 descriptor??
[ 3538.272342][T30580] usb 1-1: usb_control_msg returned -71
[ 3538.278661][T30580] usbtmc 1-1:0.0: can't read capabilities
[ 3538.299207][T30580] usb 1-1: USB disconnect, device number 49
11:52:27 executing program 0:
syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000735236088dee1ad923610000000109022d0001000010000904000003fe03010009058d1f0002000000090505021c9f7e000009058b1e20"], 0x0)

11:52:27 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

11:52:27 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

11:52:27 executing program 1:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:27 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

11:52:27 executing program 2:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

11:52:27 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

11:52:27 executing program 2:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

[ 3538.846403][ T4023] input: syz0 as /devices/virtual/input/input397
[ 3538.868654][ T4027] input: syz0 as /devices/virtual/input/input398
11:52:27 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

11:52:27 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

11:52:27 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

11:52:27 executing program 2:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

[ 3539.129012][ T4042] input: syz0 as /devices/virtual/input/input399
[ 3539.142638][ T4045] input: syz0 as /devices/virtual/input/input400
[ 3539.223062][T15562] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[ 3539.632462][T15562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10
[ 3539.644219][T15562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64
[ 3539.655224][T15562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 40732, setting to 64
[ 3539.666776][T15562] usb 1-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23
[ 3539.676831][T15562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3539.694895][T15562] usb 1-1: config 0 descriptor??
[ 3539.952234][T15562] usb 1-1: usb_control_msg returned -71
[ 3539.957880][T15562] usbtmc 1-1:0.0: can't read capabilities
[ 3539.984030][T15562] usb 1-1: USB disconnect, device number 50
11:52:28 executing program 0:
syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000735236088dee1ad923610000000109022d0001000010000904000003fe03010009058d1f0002000000090505021c9f7e000009058b1e20"], 0x0)

11:52:28 executing program 1:
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
unshare(0x8000400)
r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0)
unshare(0x10040100)
mq_notify(r1, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='s', 0x1}], 0x1)
mq_notify(r2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mq_notify(r1, &(0x7f0000000340)={0x0, 0x3c, 0x1, @tid=r3})

11:52:28 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

11:52:28 executing program 2:
syz_emit_ethernet(0x2b6, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e70e", 0x280, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x1, 0x0, "fcf98a102e"}]}}}}}}, 0x0)

11:52:28 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

11:52:28 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_DESTROY(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

11:52:28 executing program 2:
r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x85)
fstatfs(r1, &(0x7f0000000040)=""/74)

[ 3540.558329][ T4057] input: syz0 as /devices/virtual/input/input401
[ 3540.574679][ T4059] input: syz0 as /devices/virtual/input/input402
11:52:29 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
close(r0)

11:52:29 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
sendfile(r1, r0, &(0x7f0000000080)=0x1e, 0x7)

11:52:29 executing program 3:
r0 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

11:52:29 executing program 5:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}]}, 0x50}}, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)

11:52:29 executing program 2:
r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x85)
fstatfs(r1, &(0x7f0000000040)=""/74)

[ 3540.872722][T29806] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[ 3540.905029][ T4079] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3541.262795][T29806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10
[ 3541.276023][T29806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64
[ 3541.299530][T29806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 40732, setting to 64
[ 3541.310929][T29806] usb 1-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23
[ 3541.320490][T29806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3541.341670][T29806] usb 1-1: config 0 descriptor??
[ 3541.603738][T29806] usb 1-1: usb_control_msg returned -71
[ 3541.614924][T29806] usbtmc 1-1:0.0: can't read capabilities
[ 3541.736863][T29806] usb 1-1: USB disconnect, device number 51
11:52:30 executing program 3:
r0 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

11:52:30 executing program 1:
r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x85)
fstatfs(r1, &(0x7f0000000040)=""/74)

11:52:30 executing program 2:
r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x85)
fstatfs(r1, &(0x7f0000000040)=""/74)

11:52:30 executing program 5:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}]}, 0x50}}, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)

11:52:30 executing program 1:
r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x85)
fstatfs(r1, &(0x7f0000000040)=""/74)

11:52:30 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}]}, 0x50}}, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)

[ 3542.301162][ T4089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
11:52:30 executing program 2:
r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x85)
fstatfs(r1, &(0x7f0000000040)=""/74)

[ 3542.431332][ T4097] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:30 executing program 1:
r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x85)
fstatfs(r1, &(0x7f0000000040)=""/74)

11:52:31 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
sendfile(r1, r0, &(0x7f0000000080)=0x1e, 0x7)

11:52:31 executing program 3:
r0 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

11:52:31 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}]}, 0x50}}, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)

11:52:31 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
r2 = openat$sw_sync_info(0xffffff9c, 0x0, 0x103000, 0x0)
accept4$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000200)=0x6e, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100))
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32])
r4 = dup(r3)
sendfile(r3, r4, 0x0, 0x80006)

11:52:31 executing program 2:
unshare(0x20040600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8008)

11:52:31 executing program 5:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}]}, 0x50}}, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)

[ 3542.978229][ T4078] syz-executor.4 (4078): drop_caches: 1
11:52:31 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000005dc0), 0x2, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000000)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "680e69bb"}, 0x0, 0x4, {}, 0x4})

11:52:31 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000005dc0), 0x2, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000000)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "680e69bb"}, 0x0, 0x4, {}, 0x4})

11:52:31 executing program 3:
r0 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

[ 3543.086311][ T4120] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3543.119584][ T4122] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:31 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x44, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mlockall(0x2)

11:52:31 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000005dc0), 0x2, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000000)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "680e69bb"}, 0x0, 0x4, {}, 0x4})

11:52:31 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}]}, 0x50}}, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)

[ 3543.614808][ T4140] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3544.233091][ T4123] syz-executor.4 (4123): drop_caches: 1
11:52:32 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
sendfile(r1, r0, &(0x7f0000000080)=0x1e, 0x7)

11:52:32 executing program 5:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}]}, 0x50}}, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)

11:52:32 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000005dc0), 0x2, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000000)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "680e69bb"}, 0x0, 0x4, {}, 0x4})

[ 3544.419795][ T4151] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
11:52:33 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x44, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mlockall(0x2)

11:52:33 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x29a, 0x0, 0xa9aaaa0a)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80000001})

11:52:33 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x44, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mlockall(0x2)

11:52:33 executing program 5:
unshare(0x68060200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x80047458, &(0x7f0000000100))

11:52:33 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
r2 = openat$sw_sync_info(0xffffff9c, 0x0, 0x103000, 0x0)
accept4$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000200)=0x6e, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100))
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32])
r4 = dup(r3)
sendfile(r3, r4, 0x0, 0x80006)

11:52:34 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x44, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mlockall(0x2)

11:52:34 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x44, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mlockall(0x2)

11:52:34 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
sendfile(r1, r0, &(0x7f0000000080)=0x1e, 0x7)

[ 3546.447233][ T4152] syz-executor.4 (4152): drop_caches: 1
11:52:34 executing program 5:
unshare(0x68060200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x80047458, &(0x7f0000000100))

11:52:35 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x44, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mlockall(0x2)

11:52:35 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x29a, 0x0, 0xa9aaaa0a)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80000001})

11:52:35 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
r2 = openat$sw_sync_info(0xffffff9c, 0x0, 0x103000, 0x0)
accept4$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000200)=0x6e, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100))
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32])
r4 = dup(r3)
sendfile(r3, r4, 0x0, 0x80006)

11:52:36 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x29a, 0x0, 0xa9aaaa0a)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80000001})

11:52:36 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x44, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mlockall(0x2)

11:52:37 executing program 5:
unshare(0x68060200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x80047458, &(0x7f0000000100))

[ 3549.061630][ T4186] syz-executor.4 (4186): drop_caches: 1
11:52:37 executing program 4:
unshare(0x68060200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x80047458, &(0x7f0000000100))

11:52:37 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@local, @loopback}, 0xc)

11:52:38 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@local, @loopback}, 0xc)

11:52:38 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@local, @loopback}, 0xc)

11:52:38 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@local, @loopback}, 0xc)

11:52:38 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82402)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a68c53e8ef0003336f794d20352346f8f"})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0x7}}}], 0x1c)

11:52:38 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="4000000010001fff4c00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)
getpgrp(0x0)

11:52:38 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82402)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a68c53e8ef0003336f794d20352346f8f"})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0x7}}}], 0x1c)

[ 3550.372959][ T4236] wireguard0: entered promiscuous mode
[ 3550.382226][ T4236] wireguard0: entered allmulticast mode
11:52:39 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
r2 = openat$sw_sync_info(0xffffff9c, 0x0, 0x103000, 0x0)
accept4$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000200)=0x6e, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100))
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32])
r4 = dup(r3)
sendfile(r3, r4, 0x0, 0x80006)

11:52:39 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x29a, 0x0, 0xa9aaaa0a)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80000001})

11:52:39 executing program 5:
unshare(0x68060200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x80047458, &(0x7f0000000100))

11:52:39 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82402)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a68c53e8ef0003336f794d20352346f8f"})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0x7}}}], 0x1c)

11:52:39 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="4000000010001fff4c00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)
getpgrp(0x0)

11:52:39 executing program 4:
unshare(0x68060200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x80047458, &(0x7f0000000100))

11:52:39 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82402)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a68c53e8ef0003336f794d20352346f8f"})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0x7}}}], 0x1c)

[ 3551.433427][ T4246] wireguard0: entered promiscuous mode
[ 3551.491384][ T4246] wireguard0: entered allmulticast mode
11:52:39 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40010162)

11:52:40 executing program 3:
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0)

11:52:40 executing program 3:
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0)

11:52:40 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="4000000010001fff4c00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)
getpgrp(0x0)

11:52:40 executing program 3:
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0)

[ 3552.192285][ T4271] wireguard0: entered promiscuous mode
[ 3552.212254][ T4271] wireguard0: entered allmulticast mode
11:52:41 executing program 4:
unshare(0x68060200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x80047458, &(0x7f0000000100))

11:52:42 executing program 1:
r0 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000180))

11:52:42 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="4000000010001fff4c00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)
getpgrp(0x0)

11:52:42 executing program 0:
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)

11:52:42 executing program 3:
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0)

11:52:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

11:52:42 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:42 executing program 1:
r0 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000180))

11:52:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0)

11:52:42 executing program 1:
r0 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000180))

[ 3553.855717][ T4288] wireguard0: entered promiscuous mode
11:52:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0)

[ 3553.855747][ T4288] wireguard0: entered allmulticast mode
11:52:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

11:52:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

11:52:43 executing program 1:
r0 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000180))

11:52:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0)

11:52:43 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

11:52:43 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:43 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:43 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

11:52:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0)

11:52:43 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

11:52:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

11:52:43 executing program 0:
syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902970003010000000904000000010100000a24010000000201020c24c43d00000000000000000c2407000000007000d8be6b0b240600000200000000000624040000c909040100000102000009040000010102000009050109000000000007250100000000090402000001020000090402010101"], 0x0)

11:52:43 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

11:52:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

11:52:44 executing program 2:
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

[ 3555.792519][T15562] usb 1-1: new high-speed USB device number 52 using dummy_hcd
11:52:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$TCSETSF2(r0, 0x4b36, 0x0)

[ 3556.222960][T15562] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3556.250408][T15562] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 3556.260252][T15562] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
11:52:44 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:44 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:44 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:44 executing program 2:
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

11:52:44 executing program 5:
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
syz_open_dev$mouse(&(0x7f00000001c0), 0x100000000000020, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6b)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
setrlimit(0xf, &(0x7f0000000100)={0xf8, 0x2})
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

[ 3556.442733][T15562] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3556.462288][T15562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3556.535825][T15562] usb 1-1: Product: syz
11:52:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340))

[ 3556.691119][T15562] usb 1-1: Manufacturer: syz
[ 3556.717351][T15562] usb 1-1: SerialNumber: syz
11:52:45 executing program 2:
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

[ 3557.094467][T15562] usb 1-1: USB disconnect, device number 52
11:52:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x2c}}, 0x0)

11:52:45 executing program 2:
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

11:52:45 executing program 0:
syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902970003010000000904000000010100000a24010000000201020c24c43d00000000000000000c2407000000007000d8be6b0b240600000200000000000624040000c909040100000102000009040000010102000009050109000000000007250100000000090402000001020000090402010101"], 0x0)

11:52:45 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9d02}, {0x6}]}, 0x8)
sendmmsg$unix(r0, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001200)="e1e20985", 0xe2e1}], 0x1}}], 0x1, 0x0)

11:52:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x2c}}, 0x0)

[ 3557.822186][ T4361] usb 1-1: new high-speed USB device number 53 using dummy_hcd
11:52:46 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:46 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x2c}}, 0x0)

11:52:46 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9d02}, {0x6}]}, 0x8)
sendmmsg$unix(r0, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001200)="e1e20985", 0xe2e1}], 0x1}}], 0x1, 0x0)

11:52:46 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$snddsp(r4, &(0x7f0000000000)=""/2, 0x2)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff000000000000000009000400", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a0042f5487abd", @ANYRES32], 0x40}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'tunl0\x00', 0x0})
sendto$inet(r2, &(0x7f0000000180)="107e74173b5b3eb14e651e9f6bf5a559c0", 0x11, 0xc080, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
dup(r0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x12, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$dupfd(r6, 0x406, r5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

11:52:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x2c}}, 0x0)

11:52:46 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9d02}, {0x6}]}, 0x8)
sendmmsg$unix(r0, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001200)="e1e20985", 0xe2e1}], 0x1}}], 0x1, 0x0)

11:52:46 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9d02}, {0x6}]}, 0x8)
sendmmsg$unix(r0, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001200)="e1e20985", 0xe2e1}], 0x1}}], 0x1, 0x0)

[ 3558.212914][ T4361] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3558.252379][ T4361] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
11:52:46 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9d02}, {0x6}]}, 0x8)
sendmmsg$unix(r0, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001200)="e1e20985", 0xe2e1}], 0x1}}], 0x1, 0x0)

[ 3558.331097][ T4361] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3558.592691][ T4361] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3558.618569][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3558.670001][ T4361] usb 1-1: Product: syz
[ 3558.690385][ T4361] usb 1-1: Manufacturer: syz
[ 3558.727574][ T4361] usb 1-1: SerialNumber: syz
[ 3559.136915][ T4361] usb 1-1: USB disconnect, device number 53
11:52:48 executing program 0:
syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902970003010000000904000000010100000a24010000000201020c24c43d00000000000000000c2407000000007000d8be6b0b240600000200000000000624040000c909040100000102000009040000010102000009050109000000000007250100000000090402000001020000090402010101"], 0x0)

11:52:48 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_drr={0x8}]}, 0x34}}, 0x0)

11:52:48 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9d02}, {0x6}]}, 0x8)
sendmmsg$unix(r0, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001200)="e1e20985", 0xe2e1}], 0x1}}], 0x1, 0x0)

11:52:48 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @loopback}, "240086ddffff0000"}}}}}, 0x0)

11:52:48 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x4, 0x1, 0x0, 0x7000000}]}], {0x14}}, 0x5c}}, 0x0)

11:52:48 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

11:52:48 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9d02}, {0x6}]}, 0x8)
sendmmsg$unix(r0, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001200)="e1e20985", 0xe2e1}], 0x1}}], 0x1, 0x0)

11:52:48 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x4, 0x1, 0x0, 0x7000000}]}], {0x14}}, 0x5c}}, 0x0)

11:52:48 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_drr={0x8}]}, 0x34}}, 0x0)

11:52:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x44}}, 0x0)

11:52:48 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

11:52:48 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_drr={0x8}]}, 0x34}}, 0x0)

[ 3560.062539][ T4361] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 3560.462340][ T4361] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3560.473467][ T4361] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 3560.484224][ T4361] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3560.662958][ T4361] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3560.672673][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3560.684808][ T4361] usb 1-1: Product: syz
[ 3560.689109][ T4361] usb 1-1: Manufacturer: syz
[ 3560.695103][ T4361] usb 1-1: SerialNumber: syz
[ 3561.072442][ T4361] usb 1-1: USB disconnect, device number 54
11:52:49 executing program 0:
syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902970003010000000904000000010100000a24010000000201020c24c43d00000000000000000c2407000000007000d8be6b0b240600000200000000000624040000c909040100000102000009040000010102000009050109000000000007250100000000090402000001020000090402010101"], 0x0)

11:52:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x44}}, 0x0)

11:52:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

11:52:49 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x300})

11:52:49 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_drr={0x8}]}, 0x34}}, 0x0)

11:52:49 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x4, 0x1, 0x0, 0x7000000}]}], {0x14}}, 0x5c}}, 0x0)

11:52:49 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x300})

11:52:49 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x4, 0x1, 0x0, 0x7000000}]}], {0x14}}, 0x5c}}, 0x0)

11:52:50 executing program 2:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x44}}, 0x0)

11:52:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

11:52:50 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x300})

[ 3561.882194][ T4361] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 3562.282358][ T4361] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3562.306278][ T4361] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 3562.315861][ T4361] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3562.482412][ T4361] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3562.491584][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3562.510917][ T4361] usb 1-1: Product: syz
[ 3562.517472][ T4361] usb 1-1: Manufacturer: syz
[ 3562.531601][ T4361] usb 1-1: SerialNumber: syz
[ 3562.897147][ T4361] usb 1-1: USB disconnect, device number 55
11:52:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x44}}, 0x0)

11:52:51 executing program 1:
utimes(0x0, &(0x7f00000001c0)={{0x0, 0x80000001}})

11:52:51 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f00000001c0))

11:52:51 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x300})

11:52:51 executing program 2:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:51 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:51 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f00000001c0))

11:52:51 executing program 1:
utimes(0x0, &(0x7f00000001c0)={{0x0, 0x80000001}})

11:52:51 executing program 0:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:51 executing program 5:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:51 executing program 1:
utimes(0x0, &(0x7f00000001c0)={{0x0, 0x80000001}})

11:52:52 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f00000001c0))

11:52:52 executing program 1:
utimes(0x0, &(0x7f00000001c0)={{0x0, 0x80000001}})

11:52:52 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f00000001c0))

11:52:52 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:52 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

11:52:53 executing program 2:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:53 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:53 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

11:52:53 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

11:52:53 executing program 0:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:54 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:54 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

11:52:54 executing program 5:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:54 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

11:52:54 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

11:52:54 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

11:52:55 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

11:52:55 executing program 2:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:55 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

11:52:55 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:55 executing program 0:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:55 executing program 4:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
shmdt(r1)

[ 3567.712449][ T4550] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 3567.724233][ T4550] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 3567.732684][ T4550] CPU: 0 PID: 4550 Comm: syz-executor.4 Not tainted 6.4.0-syzkaller-10098-g995b406c7e97 #0
[ 3567.742790][ T4550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 3567.752884][ T4550] RIP: 0010:mt_validate+0x32ac/0x4370
[ 3567.758436][ T4550] Code: 89 ee e8 97 a8 76 f7 49 83 fd 06 0f 84 a6 06 00 00 e8 48 ac 76 f7 49 01 de 48 ba 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <80> 3c 10 00 0f 85 4b 10 00 00 4d 8b 2e 4c 89 ff 4c 89 ee e8 dc a7
[ 3567.779303][ T4550] RSP: 0018:ffffc9001070f920 EFLAGS: 00010246
[ 3567.785563][ T4550] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005bd9000
[ 3567.793545][ T4550] RDX: dffffc0000000000 RSI: ffffffff8a0e2288 RDI: 0000000000000007
[ 3567.801581][ T4550] RBP: ffff88802c473c00 R08: 0000000000000007 R09: 0000000000000000
[ 3567.809542][ T4550] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 3567.817512][ T4550] R13: ffff88802c473c00 R14: 0000000000000000 R15: ffffffff00694000
[ 3567.825484][ T4550] FS:  0000000000000000(0000) GS:ffff8880b9800000(0063) knlGS:00000000f7f1fb40
[ 3567.834422][ T4550] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 3567.841001][ T4550] CR2: 00000000f72a328e CR3: 0000000034895000 CR4: 00000000003506f0
[ 3567.849065][ T4550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3567.857044][ T4550] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3567.868936][ T4550] Call Trace:
[ 3567.872300][ T4550]  <TASK>
[ 3567.875235][ T4550]  ? die_addr+0x3c/0xa0
[ 3567.879416][ T4550]  ? exc_general_protection+0x129/0x230
[ 3567.885446][ T4550]  ? asm_exc_general_protection+0x26/0x30
[ 3567.892005][ T4550]  ? mt_validate+0x3298/0x4370
[ 3567.897658][ T4550]  ? mt_validate+0x32ac/0x4370
[ 3567.902692][ T4550]  ? mas_split.isra.0+0x1810/0x1810
[ 3567.908054][ T4550]  ? rwsem_wake.isra.0+0xc3/0x110
[ 3567.913074][ T4550]  validate_mm+0x9d/0x470
[ 3567.917396][ T4550]  ? vma_iter_store+0x9a0/0x9a0
[ 3567.922244][ T4550]  do_vmi_align_munmap+0x1199/0x1680
[ 3567.927530][ T4550]  ? __split_vma+0x830/0x830
[ 3567.932123][ T4550]  ? mtree_range_walk+0x63e/0x940
[ 3567.937204][ T4550]  ? mas_walk+0x5c7/0x7c0
[ 3567.941530][ T4550]  do_vmi_munmap+0x266/0x430
[ 3567.946117][ T4550]  __vm_munmap+0x137/0x380
[ 3567.950536][ T4550]  ? do_vmi_munmap+0x430/0x430
[ 3567.955292][ T4550]  ? xfd_validate_state+0x5d/0x180
[ 3567.960840][ T4550]  ? kernel_fpu_begin_mask+0x270/0x270
[ 3567.966297][ T4550]  ? preempt_schedule_notrace_thunk+0x1a/0x30
[ 3567.972364][ T4550]  __ia32_sys_munmap+0x60/0x80
[ 3567.977477][ T4550]  ? syscall_enter_from_user_mode_prepare+0x1d/0x50
[ 3567.984067][ T4550]  __do_fast_syscall_32+0x65/0xf0
[ 3567.989221][ T4550]  do_fast_syscall_32+0x33/0x70
[ 3567.994171][ T4550]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 3568.000586][ T4550] RIP: 0023:0xf7f24579
[ 3568.004652][ T4550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 3568.031727][ T4550] RSP: 002b:00000000f7f1f5cc EFLAGS: 00000296 ORIG_RAX: 000000000000005b
[ 3568.040130][ T4550] RAX: ffffffffffffffda RBX: 0000000020ffb000 RCX: 0000000000004000
[ 3568.048089][ T4550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 3568.056135][ T4550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3568.064110][ T4550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3568.072767][ T4550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3568.081106][ T4550]  </TASK>
[ 3568.084119][ T4550] Modules linked in:
11:52:56 executing program 5:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

11:52:56 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)=0xfffffea3)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x80, 0x0, 0x3e], 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0)
memfd_secret(0x0)
r6 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0)
gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

[ 3568.162816][ T4550] ---[ end trace 0000000000000000 ]---
[ 3568.282084][ T4550] RIP: 0010:mt_validate+0x32ac/0x4370
[ 3568.335658][ T4550] Code: 89 ee e8 97 a8 76 f7 49 83 fd 06 0f 84 a6 06 00 00 e8 48 ac 76 f7 49 01 de 48 ba 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <80> 3c 10 00 0f 85 4b 10 00 00 4d 8b 2e 4c 89 ff 4c 89 ee e8 dc a7
[ 3568.642118][ T4550] RSP: 0018:ffffc9001070f920 EFLAGS: 00010246
[ 3568.668601][ T4550] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005bd9000
[ 3568.740511][ T4550] RDX: dffffc0000000000 RSI: ffffffff8a0e2288 RDI: 0000000000000007
[ 3568.942259][ T4550] RBP: ffff88802c473c00 R08: 0000000000000007 R09: 0000000000000000
[ 3569.013246][ T4550] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
11:52:57 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

[ 3569.139649][ T4569] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'.
11:52:57 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

11:52:57 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

[ 3569.249988][ T4571] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3569.260683][ T4550] R13: ffff88802c473c00 R14: 0000000000000000 R15: ffffffff00694000
11:52:57 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

[ 3569.310121][ T4573] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3569.348128][ T4550] FS:  0000000000000000(0000) GS:ffff8880b9900000(0063) knlGS:00000000f7f1fb40
[ 3569.371837][ T4575] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'.
11:52:57 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

[ 3569.494846][ T4577] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3569.504483][ T4550] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
11:52:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000180))

[ 3569.536842][ T4550] CR2: 0000000020cf8000 CR3: 0000000034895000 CR4: 00000000003506e0
[ 3569.564943][ T4550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
11:52:58 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

11:52:58 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)

11:52:58 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a014302"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x22, 0xf4, {0xf4, 0x23, "8fccc726302cefd4f5ecfd95c2004ec88aba299373620878a34cd14d41cc06f71fd58d32ecd221b20f242c44ea8d9f93b8d1ad0d2e39981e6b0364deec9576c810e781b76d75672aa404ac9e5f2e7e05b5c87047aac86585ca0aec91e44b4b7100b450ff5e6c192d6615e07dd35585135344e676714a72ca407a06073b898219be10978a88543e49d787746cbaeaaf16037efe6a259ded30a1fd3da764273f1f7d9edca2e1bc0cdbaba29273af33b55c8a85f8c36f42e8b139263bc73f48f86790a9adfcec70eed8ca37bc5f8a138cc7960ed5931cc8235ab78419110927f62778c90c3c7b454bae716904b399ff5db2d349"}}, &(0x7f0000000580)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "56b7cdd3c419e918a2698d24c81c831195f9f4dc47b29cf42734cb43bfacecfd65bda03dfd4940c4ef3b3edd095349274b6d2ff9e18c0c151f0c6fef423047b0a9a32922171b046de65b9b0141501506bcec0f19c29b95288cd9f4136da1ca6319a0e77cc78c86a3f7d80e2a9a5e1cbe2fecf184a6d0a860143d6ae9bb93285d7520f6d0517208e3e4c95f14cda7bee361e498e0aa53bb0747cfad897c0a153f3ca93b4a7fc5ce7a637d4a21d45e2dbea98e10affaf219fe81ad9ac3b30d40e0dd12aa69c946c449adec2ba0e3e1682c32d966e209e4d2f43d03c70e02272dc9442461a17c88b25d76b2c52f5e3639b8f757"}}, &(0x7f0000000340)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x39, "facbac70297e3eae5ad7f7cbe90d241c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x80, 0x50, 0x4e0, 0xa6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x42, 0x8, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x45, 0x3f, 0x2, 0x4, 0x2}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x3, 0x69, "7feaca9d", "db6d9a4d"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x22, 0x7, 0x3, 0x7, 0xf481}}}, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x40, 0x16, 0x9c, "94463d8aff36fe992120266e47f2f2273d1fccd79df1d2a2112d54326dade06d1d9367ecb24d9a5296566576a0cc99cd5c6638c860f4b02f54fc236959f5940ecd672e97632356724e4054c5269d5d1f1f5d349b39e0d0ba3a2bf6d6560f0f23905b7aeb6a7b51441a500d78e6be453daf7e00634d591b0d023b136d9bf38980194d96c378415651581e5ef10307f01ccce01bbedff943afd8aa1876"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xb9}, &(0x7f0000000900)={0x40, 0xb, 0x2, "0dcd"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "bd58"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xdd}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x3f}})
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x300000000000000)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000080)={0x1, 0x1, 0x8})

[ 3569.707322][ T4584] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3569.717467][ T4550] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3569.729701][ T4550] Kernel panic - not syncing: Fatal exception
[ 3569.736036][ T4550] Kernel Offset: disabled
[ 3569.740364][ T4550] Rebooting in 86400 seconds..